Iria

The personal information of tens of thousands of California children -- including their names, state achievement test scores, identification numbers and status in gifted or special-needs programs -- is open to public view through a security loophole in dozens of school districts statewide that use a popular education software system.

Teacher names and employee identification numbers are also visible to anyone logging onto the system, which is used locally by school districts including San Francisco, San Jose and Hayward.

The problem occurs when the districts issue a generic password to teachers using the system. Until the teacher changes to a unique password, anyone can type in a teacher's user name and generic password and gain access to information about students that is supposed to be guarded as closely as the gold in Fort Knox.

"I'm fuming mad," said Sarah Gadye, the San Francisco middle school teacher who discovered the problem Thursday -- three years after the district purchased the service for elementary and middle school teachers. "My own child could go into this, figure it out and get all this data on all these students. It's mind-boggling."

San Francisco administrators immediately shut down access to the service, called OARS -- Online Assessment Reporting System -- after a reporter phoned and said she had been able to access student information for all the children in two middle-school classes where the teachers had not yet changed their passwords.
____________
Read More / Source: SFGate