The Princeton Review, the U.S. test-preparatory firm, accidentally published the personal documents and standardized pop quiz scores of tens of thousands of Florida students on its Web site, where they were available for seven weeks.

A flaw in configuring the site allowed anyone to type in a relatively simple Web address and have unfettered access to hundreds of files on the company’s computer network, including educational materials and internal communications.

Another test-preparatory company said it stumbled on the

files while doing competitive research. that company provided The New York Times with the Web address of the internal files on the condition that it not be named. The Times informed the Princeton Review of the problem on Monday, and the company promptly shut off access to that portion of its site.

One file on the site restricted data on about 34,000 students in the public schools in Sarasota, Florida, where the Princeton […]

Orginal post by dhiram