Wednesday, September 29, 2010

Glitch delays collection of student Social Security numbers


Will delete numbers already submitted

AUGUSTA -- The Maine Department of Education is telling school districts to hold off on submitting students' Social Security numbers to a state database while the department works out a system error that allowed a school technology director access to restricted information.
The state education department on Tuesday said it is deleting from its data systems student Social Security numbers that have already been submitted and ordering an outside review of the security of its data collection systems.
A technology director for a Maine school district on Friday reported being able to see the Social Security numbers of staff members employed by other Maine school districts.
State education officials say they immediately located the problem and addressed it, restricting access to the staff members' Social Security information. They still plan to hire an outside contractor to determine how the private information became available and how to prevent future data breaches, the department said.
"The department takes the security of private information seriously, and supports school boards, parents and school officials in their caution with respect to the collection of data," Education Commissioner Angela Faherty said in a statement.
The data flap comes as Maine school districts are for the first time collecting students' Social Security numbers to add to a statewide database intended to help policymakers track students' progress throughout school and college and into the workplace.
The Department of Education was to collect the Social Security numbers from districts along with a number of other informational items -- including enrollment and special education data -- that it collects on Oct. 1 of each year.
The Department of Education collects the information through its Infinite Campus information portal, the system through which the technology director was able to view the sensitive information.
"We're grateful that the Department of Education has recognized the seriousness of our data security concerns," said Shenna Bellows, executive director of the Maine Civil Liberties Union, which has been a vocal opponent of the Social Security number collection. "We continue to believe that there are more effective ways to evaluate student outcomes without violating student privacy."
Since the education department started rolling out information about the Social Security number collection, a number of school boards have passed resolutions opposing it. Under the 2009 law, school districts are required to ask for students' Social Security numbers, but parents can decline to share them.
The Department of Education said the technology director's ability to view staff members' Social Security numbers wasn't connected to the Infinite Campus function that would manage the collection of students' Social Security numbers.
"We want to just provide that added confidence with an independent review so people can remain comfortable that we have a secure system," said David Connerty-Marin, a Department of Education spokesman.
Connerty-Marin said state education officials are advising school districts to hang onto the student Social Security numbers they've already collected until the state is ready to accept them, which is expected to be in a few weeks.
The delay in Social Security number collection announced Tuesday is the second such delay since the law passed in June 2009. The Department of Education last September decided to hold off on the collection one more year to allow schools time to update privacy policies.
Matthew Stone -- 623-3811, ext. 435
LINK: http://www.kjonline.com/news/glitch-delays-collection-of-student-social-security-numbers_2010-09-28.html

Maine DOE Acknowledges Error in Infinite Campus


Maine DOE Takes Security Steps

September 28, 2010
Maine Department of Education
David Connerty-Marin | Director of Communications | 207-624-6880 (o) | David.Connerty-Marin@Maine.gov
AUGUSTA – The Maine Department of Education announced today that it is taking several immediate steps to strengthen public confidence in its student and staff data information systems. These include an independent review of the security of these systems, and a decision to delay submission of student Social Security numbers to the state until after they have had a chance to review the security report.
The steps are being taken as the voluntary collection of student Social Security numbers has become controversial in some Maine communities as privacy advocates have expressed concerns about the security of the information and because the Department learned in the past few days of an error within a secondary data system not connected to the collection of student information. The error, which was discovered and immediately fixed, affected information in the Staff Module of the State Edition of the Infinite Campus information system, and allowed authorized users of the system to see information there that should have been restricted. The Staff Module is separate from all other modules in the database and is in the final stages of development and not scheduled to be used for staff data collection until the Fall of 2011.
“The Department of Education will release the findings of the independent review, with specific recommendations for how to proceed in the most secure way,” said Education Commissioner Angela Faherty. It is anticipated the review will be completed in the next several weeks.
The error that was discovered on Friday was found by a technology director for a Maine school system, whose job duties include managing student and staff data in Infinite Campus. The technology director informed the Department that he was able to view Social Security numbers for some school staff in other school systems in the state. The Department was able to identify the problem that day and immediately restrict access to the information.
The Department immediately put in place the following changes:
  1. The Department has turned off the synchronization function in the Infinite Campus District Edition so that no locally-entered data can be shared with or viewed by the state or any other user. In addition, we will also delete any student Social Security numbers that have been entered or uploaded into the State system as a result of synchronization so far this year.
  2. At the Department’s request, the State’s Office of Information Technology will immediately engage an outside contractor to conduct an independent security review to verify the integrity of the state’s Staff Module where the error occurred, and to further verify that the student data system is secure.
  3. The Department will delay collection of student Social Security numbers at this time as part of the October 1 data collection. Districts will be provided a software script that allows them to upload student enrollment data without Social Security numbers. Districts should continue to securely hold the Social Security number data they have already collected for later submission.
“We deeply appreciate that this technology director immediately recognized the issue and called the Department to inform us of the error and it was resolved immediately,” Faherty said. “The Department takes the security of private information seriously, and supports school boards, parents and school officials in their caution with respect to the collection of data.”
Only people with authorized access to Infinite Campus had access to the system, and the Staff Module of the Infinite Campus State Edition is separate from all other modules in the database. The staff module is in the final stages of development and not scheduled to be used by the state for staff data collection until the Fall of 2011.

LINK: http://mobile.maine.gov/e/news/?sid=133822

Maine investigates data security breach

Posted: September 29
Updated: Today at 11:30 PM
 


The Department of Education asks schools to withhold student Social Security numbers after a glitch is found.

AUGUSTA — The Maine Department of Education is telling school districts not to submit students' Social Security numbers to a state database until it works out a system error that gave a school technology director access to restricted information.
The department said Tuesday that it is deleting from its systems students' Social Security numbers that have been submitted and ordering an outside review of the security of its data collection systems.
On Friday, a technology director for a Maine school district reported being able to see the Social Security numbers of staff members in other districts.
State officials say they immediately found the problem and addressed it, restricting access to the staff members' Social Security information. They still plan to hire a contractor to determine how the private information became available and how to prevent future data breaches, the department said.
"The department takes the security of private information seriously, and supports school boards, parents and school officials in their caution with respect to the collection of data," Education Commissioner Angela Faherty said in a prepared statement.
For the first time, Maine school districts are collecting students' Social Security numbers for a statewide database intended to help policy makers track students' progress throughout school and college and into the workplace.
The Department of Education was to collect the Social Security numbers from districts along with other informational items – including enrollment and special education data – that it collects on Oct. 1 of each year.
The department collects the information through its Infinite Campus information portal, the system through which the technology director was able to view the sensitive information.
"We're grateful that the Department of Education has recognized the seriousness of our data security concerns," said Shenna Bellows, executive director of the Maine Civil Liberties Union, which has been a vocal opponent of the Social Security number collection. "We continue to believe that there are more effective ways to evaluate student outcomes without violating student privacy."
Since the Department of Education started rolling out information about the Social Security number collection, a number of school boards have passed resolutions opposing it. Under the 2009 law, school districts are required to ask for students' Social Security numbers, but parents can decline to provide them.
The Department of Education said the technology director's ability to view staff members' Social Security numbers wasn't connected to the Infinite Campus function that would manage the collection of students' Social Security numbers.
David Connerty-Marin, a Department of Education spokesman, said state officials are advising school districts to hang on to the students' Social Security numbers they have already collected until the state is ready to accept them, which is expected to be in a few weeks.
The delay announced Tuesday is the second such delay since the law was passed in June 2009. In September of 2009, the Department of Education decided to hold off on the collection one more year to give schools time to update privacy policies.
LINK: http://www.pressherald.com/news/state-investigates-data-security-breach_2010-09-29.html

Tuesday, September 28, 2010

Infinite Campus Loses Another Account Representative

Checking in to the Infinite Campus sales web page today reveals that the company has apparently lost another sales representative: the person who used to cover the Northwest, northern Midwest, Central East and parts of the south. Now the company map indicates that no individual is handling accounts in this territory.  Instead, states that used to be covered by the former rep are marked with a generic "Infinite Campus" indicator.  It will be interesting to see if the company can find another salesperson from a competitor to cover the vast, vacant territory.

Meanwhile, the company has outsourced more areas to resellers.  Today, it appears from their map that the company is leaning on four different resellers to handle more than 20 states.

LINK: http://www.infinitecampus.com/pages/company_menu/sales.php

Wednesday, September 15, 2010

Schools in Maine Unable to Enroll Students into Infinite Campus

Due to technical issues with Infinite Campus, the Department understands that the local schools have not been able to enroll students the past few weeks.  However, to be able to meet statutory deadlines critical to the calculation of State subsidy, it is important to adhere to these annual due dates.  Currently, approximately 70% of a school administrative unit’s subsidy is directly related to student enrollments.  We encourage the schools to make enrollment a priority in order to meet these deadlines.

LINK: http://www.maine.gov/tools/whatsnew/index.php?topic=edu_letters&id=130605&v=article

Search This Blog