Personal information for more than 700 students from the Baltimore Massage School was mistakenly leaked Tuesday, the school’s parent company confirmed.
The information included social security numbers, student ID numbers, addresses, phone numbers and race descriptions.
The information, outlined in an excel spreadsheet, was mistakenly attached to an email and sent to current students and alumni, Bob Boehm, general counsel for the school’s parent company, told ABC2 News.
The school notified students of the breach by email and plan to issue a letter as well.
Boehm said the school has no indication that anyone who received the email will misuse that information, but Baltimore Massage School and its parent company are offering credit monitoring and identity protection.
The email was sent by an employee and Boehm described the breach as human error. He said he couldn’t provide any information about potential discipline for the employee because it is a personnel matter.
Boehm issued the following statement regarding the breach:
Last evening, Baltimore School of Massage learned that an email sent to students who had graduated from that school errantly included an attachment which included personal information concerning approximately 700 students and alumni. The errant inclusion of that personal information was the result of a clerical error by an employee of the school and was not part of any effort to intentionally disclose confidential information or to cause any of that information to be misused. Baltimore School of Massage promptly notified the impacted individuals of the error. Baltimore School of Massage regrets this error and although we have no reason to believe that the recipients of the email will misuse the data, in an abundance of caution, the School will be providing each of the impacted individuals with free credit monitoring, identity theft protection and fraud resolution services.