33,000+ students: Nine spreadsheets listing all students divisionwide with IEPs or 504 Plans. Five list over 26,000 students and four list over 33,000 students.
10,000+ students: December 1 count spreadsheet
1,593 students: Academic advising spreadsheet for 9th and 10th grade students by PE classes and 11th grade students by History class
1,500+ students: 7,468 teacher recommendations and notes spreadsheet
1,400+ students: PSAT and PSAT NMSQT scores
1,000+ students: FCPSMed caseload, related services
1,000+ students: mental health tracking data, to include marking students with suicidal ideation, drug addiction, domestic violence at home, and so on.
1,000+ students: spreadsheet listing students and their intent to attend.
300+ students: spreadsheet of course requests for students, listing their primary disability and placement
200+ students: list of students with IEPs due.
150+ students: three spreadsheets of testing accommodations for sped students
150+ students: Grade 4-6 PE gradebook
100+ students: spreadsheet of sped and esol 1-6b students taking an SOL
100+ students: Three quarters of grades for sped students, pulled according to the sped teacher to whom they’re assigned.
100+ students: multiple spreadsheets listing legal matters
90 students: 2019 End of Year goal data
50+ students: Math eCart data
1: One FCPS state complaint response for a student
1: One heartbreaking email from a father, telling a school principal about his child being sexually assaulted
Also included in my kids' educational records:

Invoices
Budgets
Closed meeting minutes
Emails (toxic and otherwise)
Proof that some "leaders" have based special education-related decisions on how connected a parent is, rather than what's appropriate for the student (and what happens to be in line with federal regulations)

If they don't know what information was released, than how did they know who to send the data breach letter to? They must have some idea of what they gave her, or they would have sent the letter to every family in FCPS (which they did not). Indeed, some kids in families with siblings with IEPs received letters and their siblings did not.
I think FCPS knows exactly what they gave her.

When you call the 1-800 number, you get a contractor at Experian, who just reads canned responses from a file.

There is no second letter. When asked about what data was shared, the contractor referred me to the paragraph in the first letter that had a long list of information (literally every possible kind of information).

I asked for a specific contact person at FCPS. THe contractor wouldn't give me one. I asked who their contact was at FCPS when they had questions about their phone-answering duties. They woudln't tell me. All you get out of them is a generic email address "privacy@fcps.edu". I emailed asking specifically what information about my child was given to this parent. I got an auto reply back.

It is SHAMEFUL that FCPS won't even assign an FCPS staffer to deal with this. I'm disgusted by them and by this parent.

Anonymous wrote:

Anonymous wrote:We just got a letter today for our elementary student who has never had any 504/IEP/etc.

Can anyone be so kind as to give me a tl;dr in whether I can find what info was breached or why my child might have been included? Would be happy to be directed to any particularly relevant info, just trying not to get sucked into all 18 pages of conversation. TIA!

tl;dr: No one really knows.

That’s an answer - thanks!

Anonymous wrote:We just got a letter today for our elementary student who has never had any 504/IEP/etc.

Can anyone be so kind as to give me a tl;dr in whether I can find what info was breached or why my child might have been included? Would be happy to be directed to any particularly relevant info, just trying not to get sucked into all 18 pages of conversation. TIA!

tl;dr: No one really knows.

We just got a letter today for our elementary student who has never had any 504/IEP/etc.

Can anyone be so kind as to give me a tl;dr in whether I can find what info was breached or why my child might have been included? Would be happy to be directed to any particularly relevant info, just trying not to get sucked into all 18 pages of conversation. TIA!

I appreciate your answer and I saw something like that too. She also had mental health data. I saw her list PSAT scores. It’s an extremely random list of data. I just hope nothing is incorrectly filed in his file that could hurt him in the future.

Anonymous wrote:My child doesn't have an IEP or 504. How did he get involved in this?? Is something in error in his file? I'm concerned about that as well. Can someone tell me what years she pulled so I can think of what could possibly be in his file.

Thanks!

There was a post early on in one of the threads that listed the type of things leaked. You will have to read through everything to find it. Most were 504 related things, but one was something random and unimportant, like recommendations for 10th grade history (or something similar, I might have the wrong grade or class.) Perhaps your kid was part of innocuous details like that.

A class action lawsuit against FCPS would provide very very little money to individual victims. Look at the payout for class actions for privacy breaches - you'd be lucky to get $75. In the meantime the lawyers running the suit would make a killing, and FCPS budgets would be hit hard. None of which helps kids or actual education. It's a stupid, vindictive thing to do.

Yes. There is precedent for federal class action suits against school districts in student data breach cases involving hackers insofar as it put the children at risk for identity theft. While this is different, and in some ways more egregious and negligent, I think it is worth a discussion.
If they improperly maintained and safeguarded sensitive medical and mental health information that arguably puts our children at greater risk than just identity theft.

Anonymous wrote:Has anyone contacted a law firm? This coukd be a possible class action.

Against FCPS?

My child doesn't have an IEP or 504. How did he get involved in this?? Is something in error in his file? I'm concerned about that as well. Can someone tell me what years she pulled so I can think of what could possibly be in his file.

Thanks!

Could*

Has anyone contacted a law firm? This coukd be a possible class action.

Got letter and we’re another where don’t have IEP/504 etc so called the 800 number to ask what info of DC exposed. The operators repeat what’s in letter and say another letter will come out at some point.