<p><a href="http://www.nytimes.com/2008/08/19/technology/19review.html%5B/url%5D">http://www.nytimes.com/2008/08/19/technology/19review.html</a> </p>
<p>"The Princeton Review, the test-preparatory firm, accidentally published the personal data and standardized test scores of tens of thousands of Florida students on its Web site, where they were available for seven weeks.</p>
<p>"A flaw in configuring the site allowed anyone to type in a relatively simple Web address and have unfettered access to hundreds of files on the companys computer network, including educational materials and internal communications." </p>
<p>Not too professional.</p>
<p>My kids attend Sarasota County public schools. I called Princeton Review and was told that someone would call me back (I'm not expecting the company to be particularly forthcoming). How would I be able to learn the extent of the breach and what potential repercussions there might be?</p>
<p>sunset--I wonder too--here in S Fl---I had read this article last night and wondered if all of the "folders" that were published will be revealed as the article states "access to hundreds of files" but then only notes two--Sarasota public schools, and Va. There are many implications particularly for students whose personal health information ie. special ed, 504 plans, kids with add etc. was compromised. I would like to see students whose info was published be informed--just as with companies who had breaches in their security are responsible to report to consumers, employees etc. In this day and age all kinds of secure information can be bought and sold and this needs to be addressed by the Princeton Review.</p>
<p>I'll have to find out whether my local school district has an arrangement like this.</p>
<p>That's horrible! Some kids might be really embarrassed about that. And no form of compensation, either...</p>
<p>Class action lawsuit.</p>
<p>Interesting ... it seems a competitor told the Times about it.</p>