Public school students in a municipality in Denmark had their personal information, including full names, schools, and grades, publicly exposed on YouTube and Gmail due to the municipality’s misconfiguration of school-issued Chromebooks and G Suite for Education accounts. In several cases, the real names of students with legally protected identities were exposed instead of anonymous aliases. Additionally, the municipality taped login credentials directly onto some students’ laptops, compromising account security and confidentiality.