Low-Tech Theft Exposes High-Tech Data Risks

While the industry focuses on encrypted vaults, a simple physical theft has put student data at risk. According to reporting from The Register, a vehicle belonging to Pret-a-Portrait was broken into between October 6 and 7, resulting in the theft of a camera bag containing SD memory cards.

Jon Curtis-Brignell, headteacher at Priory School in Lewes, notified families that the stolen cards may have contained photographs of pupils and images of QR code cards that display class names and student names. The risk is compounded by the fact that the equipment used at Priory School on October 1 was utilized for three other photography jobs before the theft occurred.

Pret-a-Portrait owner Nick Kerr told The Register that while it is impossible to determine the exact scope of the violation, the company believes most or all of the files from the school were likely overwritten. Kerr stated there is currently no evidence that the files were improperly accessed.

In response to the incident, Pret-a-Portrait took school photos offline, updated access IDs, and reported the theft to the police and the ICO. The company has since changed its procedures to ensure all SD cards are wiped at the conclusion of every commission. Curtis-Brignell noted that sensitive data stored in the school's own systems—including medical, financial, and safeguarding records—remains unaffected.