LAUSD Student Data Breach: Lots of Hype, Little Oversight

LAUSD Superintendent Alberto Carvalho.

These days government agencies are trying hard to modernize the way they operate by revamping their data management systems.  This is understandable.  Entities that interact with thousands or millions of citizens are trying to offer 21st century efficiency to the people they serve.

The problem is, very few government agencies actually understand the 21st century digital landscape.  Often unelected bureaucrats are making decisions about tech contracts without having any idea whether the vendors can actually deliver what they’re promising.  It’s even worse when politicians get involved, because as we know, politicians sometimes try to steer contracts toward people that have supported them.

So it’s really not surprising to learn that the Los Angeles Unified School District (LAUSD) has had some serious problems handling student data.  In June it was reported that data belonging to LAUSD students had been obtained by a hacker and was being offered for sale on the dark web.  This was related to the massive Snowflake breach, in which customers of AT&T, Live Nation and dozens of other companies had their info exposed.  Then, at the beginning of July, it was reported that a whistleblower had alleged that AllHere, a vendor working with LAUSD, had violated the District’s privacy policies in the course of setting up an on-line information system to serve students and parents.  The icing on the cake is that AllHere seems to have collapsed, and it’s unlikely it will be able to fulfill its contract.

If the whistleblower’s account is accurate, it appears that AllHere promised way more than it could deliver, and LAUSD didn’t vet the company thoroughly enough.  This is actually a fairly common story.  You may remember a few years back when the City of LA was trying to force neighborhood councils to switch to on-line voting.  The City had signed a contract with a company called Everyone Counts, which claimed they were offering a tech breakthrough that would boost citizen engagement.  They also claimed that the personal data submitted by citizens to verify their identity was absolutely secure.  Not surprisingly, Everyone Counts was bought by another company, Votem, which collapsed soon after.  All the hype about on-line voting turned out to be just hype, and no one was ever able to explain what happened to the personal data that citizens had submitted for verification. 

LAUSD Superintendent Alberto Carvalho deserves a good deal of the blame for what’s gone down.  Carvalho spent a lot of time hyping LAUSD’s tech ambitions.  AllHere was supposed to be creating a comprehensive data management system that would allow LAUSD students and parents to find all sorts of information quickly and easily.  The face of the system was an AI chatbot named “Ed”, which appeared as a bright, smiling sun.  Carvalho went on the road telling everybody how great it was going to be.  Check out this video from the ASU+GSV Airshow, where the Superintendent lays out his vision for what “Ed” could do for students and parents.

At the time, it seems that Carvalho thought LAUSD was on the cutting edge of a major breakthrough.  Now it’s clear that he had no idea what he was talking about.  Carvalho is just one of the legions of people who have been hyping so-called Artificial Intelligence without really understanding what it is or what its impacts will be.  At this point nobody really knows how AI will affect the landscape, but there are still lots of people out there making ridiculous statements that have no basis in fact.  As an example, check out this quote from the web page for the ASU+GSV Airshow.

Artificial Intelligence…

Ubiquitous. Invisible. Required for life.

Unfortunately, this kind of idiotic blather is saturating the media.  Why?  Because tech companies want you to buy in to an untested technology that they don’t even understand yet.  It’s not about taking society to the next level.  It’s about conning you into spending your money on something you don’t need.

To be fair, Carvalho is doing a tough job at a time when LAUSD (and school districts across the US) are facing serious challenges.  He probably saw this tech initiative as a rare piece of good news that he could boast about.  And the members of the LAUSD Board also deserve a good deal of blame.  Just last March, the District issued a press release where board members lined up in support of the project. 

This is a serious problem.  Thousands of LAUSD students had their personal data posted for sale on the dark web.  If the whistleblower’s allegations are correct, the problem could be much larger.  Politicians and bureaucrats making decisions about technology need to realize the dangers.  They need to stop believing the hype, and start getting serious about due diligence, or we’ll be seeing a lot more disasters like this one.