Robert Pelaez has an update on the Manhasset School District ransomware incident that resulted in the dumping of numerous files on current and former employees and students on the dark web — many with personal and sensitive information. But what caught my eye in the update was this: Last month, district officials warned Manhasset students who held or shared files posted online by hackers they could face disciplinary action.
Files posted on the dark web ranged from documentation of disciplinary actions, student grade books, general staff information, and financial records. Seriously? They are threatening the students after they failed to adequately secure employee and student data going back years?
On what grounds can they discipline students who decide to go find what is publicly available? I wonder what the ACLU might have to say about that if they actually tried to discipline students for this.
