New York School District Had Weak Password Controls: Is Your Child's School at Risk?

The New York State Comptroller released an audit of the Uniondale Union Free School District on Long Island in October

2023. The audit examined how the district managed network access for staff members. Inspectors found that school officials did not adequately manage employee network accounts and permissions. This means staff login credentials and access levels were not properly controlled. This audit focused on one Long Island school district, but the problems identified could exist at schools anywhere. If your children attend Uniondale schools, staff accounts may have had excessive access to systems. For parents at other schools, this serves as a warning that your district might have similar weaknesses. Poor account management can lead to unauthorized access to student information or school systems. If your child attends Uniondale Union Free School District, contact the school administration to ask what steps they are taking to fix these issues. Request information about how they protect student data and staff accounts. For parents at any school district, you can take these steps:
2024. Ask your school's IT department about their password policies and account management practices.
2025. Request information about how often they review who has access to student information.
2026. Find out if your district conducts regular security audits. Stay involved in your school's technology decisions. Attend school board meetings where IT security topics are discussed. Many districts publish security policies online. Reading these policies helps you understand what protections are in place. If your district doesn't have clear answers about account security, encourage them to conduct their own audit like Uniondale did.