The Lower Merion School District said on Thursday that an unknown number of \u201chighly sensitive\u201d documents were inadvertently published online due to what it described as a security breach involving its school board-management software.<\/p>\n
The software, BoardDocs, is used by school districts around the country to manage board meetings and post agendas and related information. It is unclear if districts outside Lower Merion have been affected.<\/p>\n
Lower Merion\u2019s solicitor, Kenneth Roos, said the school district first learned of the breach on April 10, when it was contacted by a litigant in a legal proceeding unrelated to the breach.<\/p>\n
Roos said internal records from the \u201cexecutive\u201d section of the BoardDocs site had at some point become accessible to the public. School board members were notified and the problem was resolved, he said. <\/p>\n
The district had not publicly disclosed the breach prior to being contacted by The Inquirer this week.<\/p>\n
The leaked documents included attorney-client privileged legal memos that discuss ongoing litigation, confidential employee information, and issues involving students who are identified by their initials.<\/p>\n
One memo, for instance, refers to an investigation of an elementary school teacher. A mother had accused him of \u201cpredatory behavior\u201d toward her son.<\/p>\n
Police and Montgomery County child welfare officials declined to charge the teacher with any inappropriate conduct, but the teacher was suspended without pay briefly for violating the school district\u2019s adult\/student boundaries policy \u201con several occasions,\u201d according to the memo.<\/p>\n
Roos said BoardDocs, which is developed and marketed by New York-based Diligent Corporation<\/a>, \u201ceventually acknowledged there was a bug or defect in the system\u201d that led to the breach.<\/p>\n It remains unclear exactly how many internal Lower Merion documents were publicly accessible and for how long. The Inquirer obtained and reviewed a sample of confidential records from 2017 to 2024.<\/p>\n Nor is it known whether the apparent bug could have impacted other school districts that use BoardDocs.<\/p>\n \u201cThat\u2019s a really good question,\u201d Roos said.<\/p>\n Diligent\u2019s senior director of communications, Michele Steinmetz, declined to comment on the Lower Merion issue or whether any other districts have reported similar leaks.<\/p>\n \u201cWe understand this inquiry may be related to a school district\u2019s active litigation, and it is our policy not to comment on ongoing litigation,\u201d Steinmetz said by email.<\/p>\n Steinmetz did not cite specific litigation or respond to follow-up questions. Lower Merion has not sued the company. But Roos said it had \u201cput them on notice that if we sustain monetary or other damages that we will hold them responsible.\u201d<\/p>\n Diligent says BoardDocs and its other board portal software has more than 145,000 users worldwide. BoardDocs, developed in 2000, offers \u201ccustomizable security\u201d to keep agenda items and documents private or make them public, according to its website.<\/p>\n \u201cIn today\u2019s climate of escalating security risk and increasingly high stakes, boards can\u2019t leave security to chance,\u201d the site states. \u201cDiligent delivers peace of mind with state-of-the-art encryption, data storage, access controls and more.\u201d<\/p>\n Lower Merion spokeswoman Amy Buckman said the leaked documents were \u201chighly sensitive\u201d and should not have been made public.<\/p>\n One parent told The Inquirer of discovering the trove of confidential memos while looking through Lower Merion school board information on BoardDocs.<\/p>\n \u201cI was like, \u2018Wait, how am I reading this?\u2019 It\u2019s weird,\u201d said the parent, who requested anonymity due to fear of retaliation from the school board and other parents.<\/p>\n Officials from the Pennsylvania School Boards Association and the Pennsylvania State Education Association, the teachers union, declined to comment on the apparent data breach.<\/p>\n Lower Merion School District, located on the affluent Main Line in suburban Philadelphia, recently ranked as the third best school district<\/a> in the state, according to the Pittsburgh Business Times school guide, which bases its rankings on standardized test scores.<\/p>\n The district recently hired Frank Ranelli<\/a>, former superintendent of Piscataway Township Schools in Middlesex County, N.J., after a series of leadership changes. It is also recovering from an unusually contentious school board primary<\/a> that included debate over antisemitism and diversity, equity, and inclusion initiatives.<\/p>\n Last month, Amazon Prime Video released Spy High, a four-episode docuseries<\/a> that reexamined the 2010 Webcamgate scandal.<\/a> The district made international headlines that year amid the disclosure that it had captured images of students in their homes using the webcams on their school-issued laptops.<\/p>\n Inquirer staff writer Maddie Hanna contributed to this article.<\/p>\n","protected":false},"excerpt":{"rendered":"The Lower Merion School District said on Thursday that an unknown number of \u201chighly sensitive\u201d documents were inadvertently…\n","protected":false},"author":2,"featured_media":2932,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[16],"tags":[183,185,184,186,2604],"class_list":["post-2931","post","type-post","status-publish","format-standard","has-post-thumbnail","category-lower-merion","tag-lower-merion","tag-lower-merion-headlines","tag-lower-merion-news","tag-lower-merion-township","tag-lower-merion-boarddocs-leak-diligent"],"_links":{"self":[{"href":"https:\/\/www.newsbeep.com\/us-pa\/wp-json\/wp\/v2\/posts\/2931","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.newsbeep.com\/us-pa\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.newsbeep.com\/us-pa\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/us-pa\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/us-pa\/wp-json\/wp\/v2\/comments?post=2931"}],"version-history":[{"count":0,"href":"https:\/\/www.newsbeep.com\/us-pa\/wp-json\/wp\/v2\/posts\/2931\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/us-pa\/wp-json\/wp\/v2\/media\/2932"}],"wp:attachment":[{"href":"https:\/\/www.newsbeep.com\/us-pa\/wp-json\/wp\/v2\/media?parent=2931"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.newsbeep.com\/us-pa\/wp-json\/wp\/v2\/categories?post=2931"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.newsbeep.com\/us-pa\/wp-json\/wp\/v2\/tags?post=2931"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}