PogoWasRight.org

Menu
  • About
  • Privacy
Menu

Class claims ACT & College Board sell students’ Social Security numbers

Posted on October 31, 2013 by pogowasright.org

Jack Bouboushian reports:

ACT and The College Board sell high school students’ personal information, including Social Security numbers, to third parties at 33 cents a head, a class action claims in Federal Court.

Lead plaintiff Rachel Specter sued ACT Inc. and The College Board, the company behind the SAT and Advanced Placement tests.
ACT and The College Board administer the ACT and SAT tests to more than 1.6 million high school students each year, the complaint states. For college-bound students, taking the ACT or SAT is not optional, the complaint states.

“In the regular course of their business, defendants obtain and possess a consumer’s PII [personally identifiable information], such as their name, home address, self-reported grade point averages, educational background, interests, date of birth, test scores, Social Security number, phone number, etc.,” Specter says in the lawsuit.

“The defendants deceived the plaintiff and the class by masking the sale of the plaintiff and class’ PII under the guise of ‘sharing,’ i.e., the defendants ask whether the plaintiff and class (who at the time were under the age of majority) would like their PII ‘shared’ with other outside agencies. In reality, the defendants ‘sell’ the plaintiff’s and class’ PII for substantial profit – on information and belief approximately $.33 per student, per buyer – to hundreds if not thousands of ‘buyers’ per year who purchase the plaintiff’s and class’ PII from the defendants. In some instances, the defendants sell the PII to organizations whose purpose it is to re-sell the lists to additional third parties.” (Parentheses in complaint.)

Read more on Courthouse News.

The case is Specter v. ACT, Inc. et al, 1:13-cv-07701, in the Northern District of Illinois. I’ve uploaded the complaint here. ACT has not yet responded to it. There are some interesting issues here as the students were minors at the time they were either allegedly opting-out of “sharing” or opting-in to “sharing,” depending on the test.

 

Category: BreachesBusinessCourtU.S.Youth & Schools

Post navigation

← No U.S. Action, So States Move on Privacy Law
Massachusetts High Court Set to Rule on Whether State Can Force You to Decrypt Your Drive →

Now more than ever

Search

Contact Me

Email: info@pogowasright.org

Mastodon: Infosec.Exchange/@PogoWasRight

Signal: +1 516-776-7756

Categories

Recent Posts

  • Apple Siri Eavesdropping Payout Deadline Confirmed—How To Make A Claim
  • Privacy matters to Canadians – Privacy Commissioner of Canada marks Privacy Awareness Week with release of latest survey results
  • Missouri Clinic Must Give State AG Minor Trans Care Information
  • Georgia hospital defeats data-tracking lawsuit
  • No Postal Service Data Sharing to Deport Immigrants
  • DOGE aims to pool federal data, putting personal information at risk
  • Privacy concerns swirl around HHS plan to build Medicare, Medicaid database on autism

RSS Recent Posts on DataBreaches.net

  • Nova Scotia Power hit by cyberattack, critical infrastructure targeted, no outages reported
  • Georgia hospital defeats data-tracking lawsuit
  • 60K BTC Wallets Tied to LockBit Ransomware Gang Leaked
  • UK: Legal Aid Agency hit by cyber security incident
  • Public notice for individuals affected by an information security breach in the Social Services, Health Care and Rescue Services Division of Helsinki
©2025 PogoWasRight.org. All rights reserved.
Menu
  • About
  • Privacy