<p>August 19, 2008
Student Files Are Exposed on Web Site
By BRAD STONE
The Princeton Review, the test-preparatory firm, accidentally published the personal data and standardized test scores of tens of thousands of Florida students on its Web site, where they were available for seven weeks.</p>
<p>A flaw in configuring the site allowed anyone to type in a relatively simple Web address and have unfettered access to hundreds of files on the company’s computer network, including educational materials and internal communications.</p>
<p>There is also a thread started in the SAT/ACT forums but I am glad nocousin has posted about this article here in the Parents Forum. I would be very unhappy with Princeton Review right now if my kid's info had been on there for anyone to access. This could have long term repercussions, especially with regard to identity theft.</p>
<p>greta--i'm in fla and wonder if pr will reveal all that was compromised...identity theft but also health protected info on some students is at risk--ie. kids with ld, add, etc. and their doctor's info verifying this. in this day and age its concerning to think how this info could even be bought and sold. think pr has responsibility to provide both whose info was up there and how they will respond. I worked for company where employee info was compromised -- they had to tell each employee and agreed to provide free credit report service to help folks track whether their identity was affected ie. new credit accounts opened by others,etc.</p>
<p>A few years ago, I considered buying stock in Princeton Review, thinking that with the echo boom and competitive admissions, a test prep company could easily make money. PR doesn't. Bad management.</p>