A Chelmsford school has admitted a data breach after an incident in which parents were sent student details.
Parents of students at Sandon School – a secondary school with students aged from 11 to 18 – received emails containing student details. The data is alleged to have included the full names of students with special educational needs and details of what those needs are. It is also claimed that the data sent to parents on Friday 28th January included details of students’ “mental states” and other sensitive information.
Several parents confirmed the data breach to the local Essex Live news service, saying the school had sent the data to all parents via its Edulink platform.
While Sandon School admitted the data breach, it said the information sent related to a “limited number of students” and was shared with a “section” of parents. The school expressed regret at the incident and said it had reviewed its internal processes to avoid any future data breaches.
The school’s headteacher, Andy Weaver, told Essex Live: “We confirm that on Friday, January 28, there was a data breach at the school where information relating to a limited number of students was accidentally shared with a section of the school’s parent body.
“We very much regret this incident, and the breach is being reported to the Information Commissioner’s office.
“We have reviewed our internal processes to ensure that this can never happen again.
“Our priority now is to support the students directly affected by this breach.”
At the time of writing, no further information was available regarding the Information Commissioner’s Office investigation or whether further action was likely to be taken against Sandon School.
Image Credit: Ascannio / Shutterstock.com