By Bennett Haeberle WDRB-TV Fox 41 News
The names and social security numbers of nearly 700 Bullitt County school district employees were sent out Tuesday by mistake.
A school district employee inadvertently and mistakenly sent out a district-wide e-mail containing the personal information of employees who had yet to sign up for health insurance benefits. School district officials said Tuesday they are taking steps to ensure the breach doesn't happen again.
"From an employer's perspective, we accidentally violated a whole lot of people's privacy that concerns us greatly. We tried not to do that, but we did and all we can do is rectify it," said Keith Davis, Bullitt County Superintendent.
Davis was one of the victims. One of 676 school district employees who became part of electronic security breach Monday, after their names and social security numbers were accidentally e-mailed out to 1800 employees. Davis says he's not worried about identity theft, but has heard complaints from district employees.
"I've had a couple of concerns, well three actually. Three e-mails and I'm sure there were several more phone calls," said Davis.
The mistake happened after a school district employee received an email from the State Department of Education, urging the 676 employees who had not signed up for health insurance to do so. That e-mail was mistakenly forwarded district-wide, containing vital and sensitive information.
"It was rushed and the employee here at the district did not catch that unusual formatting," said Eric Farris, attorney for Bullitt County's school board.
Farris says the employee who made the mistake is an "outstanding employee" who was very upset by the mistake. Davis said the employee "even cried" after catching the error. The school district was able to retrieve or delete all but three of the e-mails that were sent out.
"It's unfortunate, it's clearly a mistake on the part personnel in the district and we're doing what we can to rectify it," said Davis.
The district believes the mistake was caught quickly.
"We're confident it's not likely to result in harmful activity," said Farris.
Farris also says the district knows exactly where those remaining three e-mails were forwarded and has urged those recipients to delete them. The district does not suspect the breach will result in any cases of identity theft.