New Policy For School Data

The information pertained to students enrolled in 2005 and 2006.

FREDERICK, Md. (AP) — The Frederick County school board has a new policy for responding to data breaches like the one that exposed Social Security numbers and other personal information of about 1,000 former students.

The board adopted the policy Wednesday.

It generally requires victim notification within 45 days of a verified security lapse. It took school officials more than three months to notify victims in December after a former student reported that the information was for sale online.

The information pertained to students enrolled in 2005 and 2006.

Board President Brad Young attributed the delay to state involvement in the breach. The school system says the information was likely stolen from a Maryland State Department of Education computer system. The state disputes that assertion.

By:  AP