The Virginian-Pilot
©
VIRGINIA BEACH
A student gained access to a computer file last month containing names, addresses and Social Security numbers of about 16,000 students attending 22 Beach schools, administrators said Thursday.
The Ocean Lakes High School student opened the file and tried to print some of the information from a school library computer, officials said. A library employee notified the technology department.
The student has not been criminally charged in the May 6 incident, police said, because there is no evidence that he used the information. However, minor charges may still be brought, police said. School officials said they waited until the police investigation concluded to notify parents.
In addition to names, addresses and Social Security numbers, the files also contain parent names, phone numbers, class schedules, birth dates and student ID numbers.
A letter has been sent out to parents Thursday at the 22 affected schools, and a copy of the letter is posted at http://www.vbschools.com/announcements/SecurityLetter.asp. If parents notice any fraudulent activity, they are asked to contact the economic crimes unit of the police detective bureau at 385-4101.
Jimmie Baker, who has four children at Thalia Elementary, said he's surprised the schools didn't have adequate protections to prevent such access. Thalia is one of the affected schools.
Baker said this incident won't shake his faith in the school administration. "I don't think any of them would put the kids or kids' family in jeopardy."
Bill Brunke, a School Board member whose older daughter attends Ocean Lakes High, said he is more concerned about data security than about someone being harmed.
"The police assured us the data was secured and not disseminated," Brunke said. "As a parent, I'm troubled, but as a School Board member, I'm very concerned that there was a security breach."
The student, who is a juvenile, has been disciplined by the school division. Punishment ranges from detention to expulsion for unauthorized use of computer technology.
Chief Information Officer Ramesh Kapoor said the security setting on the data file was changed immediately on May 6, but it was unknown how long it had been accessible. The division immediately checked hundreds of other files and servers to make sure there could be no other breaches and found no problems.
Kapoor said there is no problem with the system, just a human error on one setting.
"We take security very seriously," he said. "We constantly review and upgrade security."
Police spokesman Adam Bernstein said there is no evidence of any other unauthorized access while the files were unsecured.
Lauren Roth, (757) 222-5133, lauren.roth@pilotonline.com
Delicious
Digg
Reddit
Facebook
Twitter
Google
Yahoo
In the letter VBCPS suggests
In the letter VBCPS suggests that we initiate a fraud alert with the three major credit bureaus and listed their phone numbers. Guess what? It's not that easy. To start the process with Equifax, I have to send them a copy of my driver's license, my proof of address (utility bill, bank statement, etc), a copy of my son's birth certificate and a copy of his social security card. So to make sure my child's information hasn't been breeched I have to possibly breech both of ours by sending it through the mail (it has to go to Texas!). Or just to be safe, I can spend my own money to send that information to them via UPS so that I can track it.
Thanks, Virginia Beach Public Schools. Because of you I now have to make sure that my child's credit isn't ruined before he gets a chance to ruin it on his own. Did I mention he's eight?
Here again is another reason
Here again is another reason why the use of socialist security numbers should be removed from these databases. This is how identity theft runs amuck and probably how illegal aliens getting ID cards. I didn't have a SSN when I was in school. I had an ID number issued by the school system that I used thoughout school. The military should do the same and return to service numbers. SSN should be only used for social security; not an ID.
Smart kid or lack of security
Smart kid or lack of security? They should not punish this kid at all.
The should punish the net work admin. How do you let a kid or anyone for that matter us a school library computer (one you control) Hack into your network? you should reward him for showing you the weakness in your security. How much other information is getting hack from you? You may want to hire some new IT folks
Really?
First of all, firewalls are in place to prevent access to data from outside the school system. This student was logged into the network from inside where there are different security settings. Unfortunately, those settings were not sufficient. I am hopeful that this was merely a challenge and not an attempt to break any laws or share any confidential information.
Secondly, anyone who thinks the fault is with a teacher has obviously never been in a school library or computer lab. How in the world can one person monitor every move of every student while helping and answering questions? At no time is it possible to see all 30 computer screens, let alone monitor them.
As the use of technology increases, there will be more and more security breaches. Children must understand that data theft is every bit as serious as tangible property theft. Where does the teaching of ethical behavior belong?
Info on Green Run Shooting
I've made a few comments already but thought this warranted posting. The school system delayed the release of info on the Green Run Shooting back in April or May. They have claimed from the git-go that no Green Run students were involved. Well, ironically in this last week of school when many students aren't attending exams due to exemptions, the news NOW reports that in fact, 3 of the suspects were Green Run students AND it was a gang-related mob attack. It amazes me that VBCPS can get away with withholding information from parents that is vital but yet will send out an ALERT Now message when city council tries to take their money. There's something wrong with this picture. VBCPS is notorious for sweeping things under the rug. If a teacher or parent wants to know what's going on, they have to ask a student. Students know more than the teachers at times. From drug busts at schools, to students showing up drunk or under the influence at proms/ring dance, to weapons and fights...none if it makes the news, so ask the students, they know what's going on.
Norfolk??
Those folks are acting like this is Norfolk public schools!! The school board should investigate this, or reveal they knew it all the time. The alert system use should have been addressed by the board too. It's easy for current members of the school board to stage protest and send letters against the council members, but they coming short on being honest and forthcoming, apparently on a number of issues.
Norfolk??
Those folks are acting like this is Norfolk public schools!! The school board should investigate this, or reveal they knew it all the time. The alert system use should have been addressed by the board too. It's easy for current members of the school board to stage protest and send letters against the council members, but they coming short on being honest and forthcoming, apparently on a number of issues.
That Rug has an Awfully Big Bump....
I couldn't agree with you more about VBCPS "sweeping things under the rug." Just look at their web site...and try to read the results of their employee survey. I guess the public and news media just dismisses concerns as disgruntled employees or parents. Too bad...because for a school division that toots its horn about being ahead of the curve...6 or whatever schools on Newsweek's "Best HS in America" (and most of those are from 500 down) is hardly "Ahead of the Curve."
Swept Under...Look at the VBCPS procurement list on the V-P website. 319 employees (mostly middle management) have division credit cards and have charged over $2M in the last 2 years. The names of Merrill, Magula, and other top administrators are conspicuously absent. A large number of the expenditures are to Farm Fresh. But when the VBCPS Art Dept has a student show or even the teacher show which recognizes those administrators who support their school's art program, teachers are expected to pay for the reception's drinks and food out-of-pocket. The school division didn't even want to shell out $1000 to recognize the Teacher Assistants of the Year.
bigger than that.............
It's bigger than that. I wondered about what happened in the Green Run murder myself. The fact is everything about Virginia Beach is swept under the rug! The tourist won’t come here if we have negative news about the city, not just the schools. It has always been that way. You will hear about Norfolk or Portsmouth in the news but unless it happened in your area, you won’t know about any crime in Virginia Beach.
Why?
First, why are the names and social security numbers of students on any type of web accessible server at all? This type of information should be main-framed and kept secret, which leads to my second question: How is it necessary that information regarding 21 other schools and their students be available to Ocean Lakes?
A lot of this just doesn't make sense and is totally avoidable. Students district wide are given ID numbers. For what purpose are Social security numbers to be used by the Virginia Beach School system them?