Indiana University officials say a tool designed to help university staff access student grade point averages was unintentionally made available to the entire IU community.
Spokesperson Chuck Carney says the tool was immediately disabled once the ability to access all enrolled students' GPAs was made known to IU officials.
The Indiana Daily Student reported that the GPA calculator tool allowed students, faculty and staff to gain access to records for at least 100,000 current and former students who graduated in 2015 or later.
The data breach could be a violation of the Family Educational Rights and Privacy Act, which requires consent before an educational institution can disclose personal information from educational records.
Carney says no student data beside GPAs was made accessible as a result of unintended access. He also says only information about former and current students of IU's Bloomington campus and students transferring classes to or from that campus could have been accessed.
Carney says the university is working to determine how the information was made available and to ensure it doesn’t happen again.
