1. Chalkbeat reported today on a data breach on a google drive that exposed the personal information of 3,000 students and about 100 school employees Though the article just mentioned some District 28 students were affected, we know that students in other districts were affected as well. What is still unknown is how many schools experienced breaches, what personal student data elements were affected, and when this breach occurred.
for the NY student privacy law requires that all this information be included in notifications to affected
Notifications required by this section
shall be clear, concise, use language that is plain and easy to understand, and
to the extent available, include: a
brief description of the breach or unauthorized release, the dates of the
incident and the date of discovery, if known; a description of the types of
personally identifiable information affected; an estimate of the number of
records affected; a brief description of the educational agency’s investigation
or plan to investigate; and contact information for representatives who can
assist parents or eligible students that have additional questions.
Parents, please ask your
principals if any of the students in your children's school was affected, and if so, ask
them for a copy of the letter that was sent to families. And let us know
if you get any answers and/or the copy of the letter by emailing firstname.lastname@example.org thanks!