Cyber Risks · Krebs on Security

Report: Missouri Governor’s Office Responsible for Teacher Data Leak

Summary: Missouri prosecutors declined to charge St. Louis Post-Dispatch reporter Josh Renaud, who in October 2021 alerted the state education department that its website exposed teachers' Social Security numbers in HTML source code. A 158-page Missouri Highway Patrol report concluded after 175 hours that Renaud did nothing wrong, and emails showed the FBI told state officials there was "not an actual network intrusion" and the database was "misconfigured."

Bottom line: The state's own communications chief told investigators the weakness exposed 576,000 teacher Social Security numbers, and the site was maintained by the Office of Administration's IT division that the governor's office controls directly - yet the governor vowed to prosecute the people who reported it.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related