Hong Kong’s Office of the Privacy Commissioner for Personal Data (PCPD) recently announced that the personal information of as many as 8,505 students at several different schools has inadvertently been exposed online.
“The breach involved two primary, seven secondary and two tertiary institutions,” writes The South China Morning Post’s Phila Siu. “Data from the nine schools included names, e-mail addresses, student reference numbers and telephone numbers. Most of the information was in contact lists for school clubs and alumni.”
“According to the PCPD, it started compliance checks on 12 schools alleged to have exposed student data online according to a media report last April,” Computerworld reports. “The results confirmed that 9 of the 12 schools had inadvertently exposed personal information on their web sites.”
“Bearing in mind that we have only spent a limited amount of our time in the exercise and our search was only based on some unsophisticated means, the extent of the cyber security problem we have identified is disproportionate,” Privacy Commissioner for Personal Data Allan Chiang said in a statement. “It reflected a serious lack of vigilance and adequate security measures on the part of the educational institutions in safeguarding personal data.”