My school recently opened a new website. The site allows teachers to submit roll sheets, do grades, etc. The problem is, the site also allows the teachers to view contact information. Specifically Social Security Numbers for all students in the class. The website is NOT secured(no SSL to speak of) and im willing to bet a hacker could steal a teachers login, and get all the students information(Including SSN's). I called the superintendents office and was informed that teachers already had access to SSN's before hand, and they had to sign a agreement or something. The High school has 1800 students, and about 30 per class. That makes about 150 students per teacher( 5 periods X 30 students) I would like to know if any Laws apply to this, such as not securing confidential information, and other then persisting in informing them, if I can do anything.
Tags: