Florida Virtual School, the nation’s largest state-run online school, had two data breaches last week.
Leon County, which has about 34,000 students, is a central character of the data breach dispute.
Data for more the 368,000 students who have taken courses at the Florida Virtual School was not secure for almost two years leaving personally identifiable student information at risk for potential identity theft, according to school officials.
One breach consisted of student data was transferred from the Florida Virtual School (FLVS) and the Leon County School district, which included Social Security numbers, address, phone numbers, personal contact information, and other sensitive student data along with emergency information of 1,800 Leon County teachers.
“FLVS takes its obligation to protect the privacy of personal information very seriously and deeply regrets this incident,” the school said in a notice posted to its website.
The Leon County School district questions the security measures of the FLVS. Superintendent of FLVS, Rocky Hana stated that “hackers got all the data from a single server left open” and FLVS is ” 100 percent responsible for the theft,” according to a press conference on Monday.
Over 50,000 students and teachers in Leon County have been individually impacted by the data breach.
FLVS is offering those who may have been impacted by the breach a year of identity-protection and fraud-monitoring services and currently, there is no evidence that financial information has been stolen.
All over the country, schools have taken a slow approach to cybersecurity and most of the breaches occur through ransomware and phishing.