Exposure of Minor Student’s COVID-19 Status via School Electronic Register
A minor male student at a school in Italy had his private medical information regarding a positive COVID-19 test exposed to his classmates and their parents. A teacher at the school sent the notification and the official public health document containing the minor’s identity via the school’s electronic register. The incident led the student’s father […]
Exposure of student’s special education and health details on school electronic registry portal
An administrative assistant at a high school in Italy made a selection error on the school’s electronic registry portal, accidentally publishing a confidential meeting notice to all parents of a class instead of only the target student’s parents. As a result, the female student’s sensitive personal and health-related data, including her special education status and […]
School Electronic Register Error Exposes Minor Student’s Individualized Education Plan to Class Parents
A support teacher at a school in Italy mistakenly configured the visibility settings on the school’s electronic register while uploading an Individualized Education Plan (PEI). This error made a minor student’s sensitive educational and disability records visible to all parents of the classroom for approximately 22 minutes. During this window, another parent saw the notification, […]
School email to about 37 families with visible addresses reveals children missing vaccination paperwork; school asks email software vendor for a warning, Lombardy, Italy
Parents complained through a lawyer that the school sent a vaccination-compliance reminder to about 37 families with all addresses visible, revealing which children were not in order. The school notified a data breach, retrained staff, and asked the software house that supplies its email program to add a warning whenever several recipients are entered. The […]
Parents’ personal and student data collected through government education monitoring apps without transparency
A parent reported that during the COVID-19 period government education applications collected extensive information about students and parents including names phone numbers locations and school details. The applications later disappeared and it was unclear what happened to the data. This is a personal interview. Source available to SHIELD.
Two middle-school students allegedly hacked a teacher’s register account and changed classmates’ grades, Italy
A report of an anomaly in an electronic register at a lower secondary school in Italy reached the police cyber-security unit, which checked access logs and IP addresses and confirmed a teacher’s account had been breached and many students’ grades changed. Two students of the school were identified as the alleged authors and referred to […]
Parents required to provide identity and payment information through school application lacking privacy disclosures
A parent reported that a school application required identity numbers, phone numbers, and payment information without providing a clear privacy policy. This is a personal interview. Source available to SHIELD.
Cyberstalking and Circulation of Morphed Photos of School Students and Teachers
A group of nine minor girl students and five female teachers at a school in Delhi were targeted by an online stalker. The stalker accessed the school’s online classes and WhatsApp groups without authorization, made harassing calls and messages from fake international numbers, and circulated morphed nude and semi-nude photos of the students on Instagram.
Unlawful Biometric Processing and International Data Transfer of Italian University Students via Respondus Proctoring Software
Starting in April 2020, students at a university in Italy had their sensitive biometric facial data, screen activities, and video recordings captured and analyzed by the ‘Respondus’ proctoring software during remote exams. The software automatically flagged behaviors deemed suspicious and compiled automated surveillance logs on the students without a valid legal basis or proper student […]