Worried About Hackers? FCPS has Been Breaching Students’ and Staff’s Privacy for Years

For years, Fairfax County Public Schools (FCPS) has been aware of its failures to secure private information.

Hackers breaching its system is another breach in a long line of privacy breaches and failures to secure information.

This evening, 9.11.20 (hours after news outlets were already covering the story), FCPS announced, that “ransomware was placed on some of [FCPS’] technology systems.”

According to Drew Wilder of NBC News Channel 4 in Washington, D.C., there is more than ransomware to be concerned about:

The internet hacking group Maze claims it stole private information from Fairfax County Public Schools. To prove it, Maze has already posted some of it online. . . . News4 has viewed some of the documents posted online. One is nothing more than an internal training document from several years ago. But there’s also personal information that includes letters regarding disciplinary actions against 15 different students and their grades.

And yet . . .

FCPS has been releasing information about students—without their permission—for years.

FY15-17:

In an internal FCPS document titled “Hot Topics“, dated December 11, 2017, cover 2015-17, FCPS stated about Silverbrook Elementary School:

“SLP asked all sixth grade speech students to stand to be recognized during the EOY assembly in front of entire school. Proposed resolution to parents and they declined. CAP required training for SES and letter of assurance.” “Maintain student confidentiality, particularly about sped status. Provided FERPA/confidentiality training to Silverbrook.”

In the same “Hot Topics” document, FCPS stated:

“Confidentiality of student records is a significant concern across the division. FCPS was found out of compliance by VDOE due to a confidentiality breach at Silverbrook ES, and we anticipate a noncompliant finding by VDOE again in the pending state complaint regarding Silverbrook and South County MS.”