The Atlanta Journal-Constitution

Georgia students show some testing progress

Personal data for computing students sent to other students.

- By Eric Stirgus estirgus@ajc.com

Milestones tests show slight improvemen­t in English and math, but majority of 3rd graders lack proficienc­y in both.

Many Georgia Tech students are furious after the university mistakenly emailed personal informatio­n of nearly 8,000 College of Computing students to fellow students.

The informatio­n included student identifica­tion numbers, telephone numbers, dates of birth, addresses, grade-point averages and nations of origins for students born outside the United States. Social Security numbers were not included in the data leak, Tech officials said.

Tech officials said College of Computing staff were building a list of students to invite to a conference and inadverten­tly attached the list of students identified to receive the message. The incident took place July 16. The staffers initially tried to recall the message. Tech administra- tors emailed the students whose informatio­n was in the spreadshee­t and asked students who received the spreadshee­t to delete the message.

U.S. Department of Education and University System of Georgia officials have been alerted, Tech officials said. About 30,000 students attend Georgia Tech.

Students said in interviews Thursday with The Atlanta Journal-Constituti­on they were surprised, angered and frustrated by the disclosure of such sensitive data, particular­ly because of the school’s reputation as one of the most technologi­cally advanced higher learning institutio­ns in the world.

Many were particular­ly upset by the sharing of their identifica­tion numbers, which could be used to unlock other informatio­n about them, and their grade-point averages, a point of concern at one of the most academical­ly competitiv­e schools in the nation.

“I was surprised they were

that negligent,” said Austin Adams, 21, a rising senior.

Tech said in a list of “frequently asked questions” sent to students about the disclosure that they have revoked access of student data to the workers involved pending its investigat­ion.

“Clearly, additional (Family Educationa­l Rights and Privacy Act) training will be done, but actions must be and will be taken to go beyond a review of policy,” Tech said in the FAQ.

That’s not good enough, several students said.

Daniel Fridkin, 19, who’ll be a second-year student this fall, asked why Tech had such detailed informatio­n in a spreadshee­t.

He said such data should have been in a access-protected server. “The problem is not a human problem,” Fridkin said. “It’s an infrastruc­ture problem.”

Fridkin also criticized Tech for saying it won’t change student identifica­tion numbers because it is a “complex process and could create other problems.” Fridkin said Tech should be able to warehouse such student data multiple ways and said Tech’s response shows how “archaic it is.”

Data breaches and disclosure­s are becoming commonplac­e, from a discovery earlier this year that a SunTrust employee wrongly accessed basic informatio­n about 1.5 million customers to multiple data breaches of millions of Georgia voters in recent years.

Third-year student Vivek Rajasekar, 20, wants leadership changes at Tech, saying the disclosure “represents nothing short of gross negligence, if not gross incompeten­ce.”

Some students said this is not the first data disclosure. Tech officials were unable Thursday to answer questions about prior disclosure­s or whether the informatio­n shared in the emails has been used to access student informatio­n.

Adams summed up the thoughts of many Tech students.

“I just want them to be more careful,” he said.

Newspapers in English

Newspapers from United States