Post

The breach is the headline; the retention schedule is the story. Records back to 2006 sat on a vendor SFTP for decades, one compromised login, four months of copying. Every district should be demanding its vendors' data destruction schedules in public this week.