A North Carolina school district claimed Google cracked its server to index a page containing the names, test scores, and Social Security numbers of 619 students.
|Google Accused Of Pilfering Student Data|
Winston-Salem’s Journal Now reported a North Carolina judge granted a temporary injunction against Google, requiring it to remove information about the Catawba County Schools Board of Education from its servers. Google said it hasn’t done anything wrong.
At issue is information the school district had stored on a password-protected server. A page of personally identifiable student information ended up on Google, where searchers could view it until its apparent removal on Friday.
The school district has been carrying details of the incident on its website. Superintendent Tim Markley described what was accessed in a report there:
A Google spokesperson cited in the Journal Now report confirmed that Google could not access or index a password-protected site. But the districts CTO, Judith Ray, claimed that Google somehow managed to get in and grab the page:
It seems more likely that the page was exposed to the Internet through another link, or possibly a misconfiguration in its security. Markley noted that the DocuShare server had been shutdown as of Friday. Access logs to the system would likely be instructive as to the path the Googlebot took to retrieve that page.