August 20, 2008
Thousands of Princeton Review test scores left unprotected online
At some point during our school or college years we all wanted some information about the cute girl two classes our senior or (for Girls) a cute guy who leads the school sports team. Anyway, finding out about that person would have made us either reach out and make unusual friends or just end up being embarrassed of the whole ordeal. However, for seven weeks the students of Florida had their Princeton Review test scores available on the Internet for anyone to see along with other personal details. The Princeton Review was hired to build online tools for the public schools in Sarasota, Florida, Fairfax County, Virginia to help the county measure students’ academic progress. This resulted in complete access to student test scores along with their date of births, ethnicity, and any learning disabilities. If that’s not alarming then perhaps knowing that even the internal analysis of the effectiveness of the company’s instructors, and the entire texts of some Princeton Review books, like the 2008 edition of “Cracking the LSAT” was easily available on this link.
The Princeton Review in its defense said that this loophole was the result of a data migration malfunction after it switched its Internet service provider. Admitting further that such sensitive data should have been protected by a strong password.