Parents Concerned About Access To Their Students’ Private Data In School District’s Computer System After Homecoming Queen Hack Arrests

March 17, 2021

Following the arrest of a Tate High School homecoming queen and her assistant principal mother for alleged improper use of an Escambia County School District computer system, parents are concerned about the safety and security of their students’ personal information and why they were not notified.

Laura Rose Carroll, 50, and her 17-year old daughter, Emily Rose Grover, were charged by state law enforcement with multiple computer crimes. Grover and Carroll, a now-suspended assistant principal at Bellview Elementary School, allegedly accessed hundreds of student accounts to cast fraudulent votes for Grover, enabling her to win the homecoming queen crown.

NorthEscambia.com took the parental concerns about student data to Escambia County School Superintendent Dr. Timothy Smith.

“An assistant principal and a principal have a lot of access in order to do their job,” Smith said. “There is a lot of information there.”

According to the Florida Department of Law Enforcement, the Escambia County School District FOCUS program contains grades, medical history, test scores, attendance, disciplinary actions, personnel information, emergency contacts, schedules, exceptional student education (ESE) information, student picture and student identification number. Teachers and staff members are able to view student profiles or more depending on access level.

An assistant principal, Smith said, would have district level inquiry access to the system.

Arrest affidavits obtained by NorthEscambia.com show the school district became aware in 2020 of the alleged improper use of the FOCUS system by Grover and Carroll.

Smith said the district will investigate.

“That’s something we will have to work with the state on and the steps they would have to take,” he said.

While no accusations have been made that the duo changed any grades, we asked Smith if that possibility would be investigated.

“We’ll have to see once FDLE is done what they have for us,” the superintendent said.

Nine students and one teacher provided statements to FDLE that said Grover spoke about accessing Carroll’s FOCUS account or they have seen her access it for almost four years.

“I have known that Emily Grover logs into her moms school account in order to access grades and test scores since freshman year when we became friends,” one student said in a statement to FDLE. “She has looked up [redacted] student ID before to [redacted]. She also knows that if she logs into her moms account at Tate it will ping that Laura Grover signed in at Tate High School. She looks up all of our group of friends grades and makes comments about how she can find out our test scores all of the time.”

“When Emily Grover was a sophomore [redacted] class, I recall times that she logged onto her moms focus account and openly shared information, grades, schedules, etc. with others. She did not seem like logging in was a big deal and was very comfortable with doing so,” another statement written by a witness said.

Carroll, and Grover where charged by FDLE with one count each of offenses against users of computers, computer systems, computer networks, and electronic devices (a third degree felony), unlawful use of a two-way communications device (a third degree felony), criminal use of personally identifiable information (a third degree felony) and conspiracy to commit these offenses (a first degree misdemeanor).

The investigation started in November 2020 when the Escambia County School District contacted FDLE to report unauthorized access into hundreds of student accounts. The investigation found that Carroll and Grover had accessed student FOCUS accounts.  FOCUS users are required to change their password every 45 days and Carroll’s annual training for the “Staff Responsible Use of Guidelines for Technology” was up to date.

In October 2020, hundreds of votes for Tate High School’s Homecoming Court voting were flagged as fraudulent, with 117 votes originating from the same IP address within a short period of time. Agents uncovered evidence of unauthorized access to FOCUS linked to Carroll’s cellphone as well as computers associated with their residence, with a total of 246 votes cast for the homecoming court. Multiple students reported that the Grover described using her mother’s FOCUS account to cast votes. The investigation also found that beginning August 2019, Carroll’s FOCUS account accessed 372 high school records and 339 of those were of Tate High School students.

Grover was expelled from Tate High School.

Pictured above and below: Laura Rose Carroll, Bellview Elementary Facebook and Escambia County Jail; Emily Rose Grover, Tate High School’s 2020 homecoming queen, NorthEscambia.com photo.

Comments

30 Responses to “Parents Concerned About Access To Their Students’ Private Data In School District’s Computer System After Homecoming Queen Hack Arrests”

  1. Monica on March 23rd, 2021 12:37 am

    It says a lot about how to district protects student records that this went on for so long, but the only thing that brought it to their attention was in the integrity of the Homecoming Queen vote. Meanwhile the student records that are covered by FERPA weren’t protected.

  2. Granny Googs on March 19th, 2021 7:54 am

    I would love to ask both women, “Was it worth it?” I don’t feel sorry for either one! As my dad told us “If you can’t do the time, then don’t do the crime!” I hope the mom is fired and the daughter not be allowed to graduate! Did they actually think they wouldn’t get caught?

  3. Citizen on March 19th, 2021 12:01 am

    I cannot see any reason whatsoever an assistant principal or principal should have access to any student not currently enrolled at school they administer. From what I gather out of all the stories I have read, FOCUS system required user to regularly update password & she was regularly updating her daughter to snoop and district was only aware after 3rd party vendor handling Homecoming Queen election caught all votes coming from same IP address. Makes you wonder about any results coming off FOCUS.

  4. Betty Killam on March 18th, 2021 9:26 pm

    —very sad that this woman has ruined her daughters reputation and caused her embarrassment beyond measure.—no question of who was at fault in this circus! If you can’t trust your mother to do the right thing, who can you trust!!! Yes, the young lady knew it was wrong but if Mama says it is alright, then it must be. I feel very sorry for this beautiful girl. Shame, shame on her mom for this mess! I do not know these people but my heart goes out to the young girl. Even if the girl accessed the information, her mom had to give her the password!

  5. Former ECSD Employee on March 18th, 2021 9:43 am

    How,

    You have no ideal how right you are.

    I know where the bodies are buried because I am a former employee who worked at one of the schools in the district.

    The IT department is a joke and run by unqualified morons.

    I am waiting for something worse to happen….

    No one was interested in my concerns (media, other governmental agencies, public) so I quit my job and left the district.

  6. "You Gonna Eat Your Cornbread" on March 18th, 2021 7:57 am

    Maybe one or both will make the “Who’s Who” list in the cafeteria of the pen

  7. How on March 17th, 2021 10:59 pm

    How can this district lag behind in technology. Do they have a department that oversees these things? So no red flags show up when someone is accessing so many accounts for a school they are not working for. Who is in charge of the IT department? Could it be more good ole boy system? Put a friend in charge that doesn’t really know what they are doing. There should be a lot more discipline handed out than the two who cheated. Very scary when you have a kid in Escambia and such important information can be breached so easily. Time to clean out some people sitting in those district offices that are asleep at the wheel

  8. Master Mechanic on March 17th, 2021 10:52 pm

    Pretty is only skin deep,ugly goes clear to the bone.
    My Grand Dad taught me that many many years ago. Lot of truth in it.

  9. Sherry Taylor on March 17th, 2021 9:34 pm

    One who gains victory through deceit can never truly own it. Quote from a 30 year old comic book, but very true!!

  10. Assistant to the Regional Manager- Dwight Schrute on March 17th, 2021 2:08 pm

    She pulled a Michael and bought herself a “world’s best boss” mug.

    You miss 100 percent of the shots you don’t take – Wayne Gretzky” – Michael Scott

  11. Loco for Hoco on March 17th, 2021 1:28 pm

    I would like to know if the mom’s suspension is paid or not? It seems Mrs. Carroll has already wasted our tax dollars doing unethical business for years no sense in continuing this wasteful behavior. Leave without pay because they will cost the taxpayers again when they get sentenced. Smh, I hope the crown was worth your 15 minutes in the spotlight.

  12. William L on March 17th, 2021 12:42 pm

    I’m curious if the daughter approached mom with the idea of cheating or if the mother approached the daughter? Either way, they both deserve what they get. I can only imagine what these two are capable of, imagine what they would do if it was something really important, they would throw anyone and everyone under the bus!!!

  13. Joel on March 17th, 2021 10:09 am

    In my day we were taught morals at home and at school. Not anymore since officials now think that teaching morals is the same as teaching religion! It is no longer important to not do bad, now its only important to not get caught!

  14. Deborah Daugherty on March 17th, 2021 9:57 am

    I wonder if she can wear her crown in a jail cell..? ..All jokes a side,how horrible for this young girl to go thru Yea,,she had some fault in this but this will stick with her for a long time

  15. Karen on March 17th, 2021 9:30 am

    My mama always told me ‘pretty is as pretty does’ and this girl and her mother are very ugly indeed aren’t they. It’s really sad to have to cheat to be crowned pretty or most popular and become Homecoming Queen. I wonder if she was the prettiest girl in lock up. Hope they get more than a slap on the wrist.

  16. concerned citizen on March 17th, 2021 9:04 am

    This happens more than people know. I have kids who attended Tate H.S. 20 years ago. One of my kids had a friend whose Mother was a substitute teacher at Tate. Even though the woman was NEVER a substitute in any of my child’s classes, she always seemed to know a little too much about my child’s school information such as test scores. She knew this info before my child or myself received the info from the school. There is only one way she could have received this info and that was through the school. There should be a simple way to insure that school employees including subs can access info ONLY for the students they teach and not for every student in the county. It should be no different than private companies who allow employees to access computer programs/information for their location only and not locations across the country/world.

  17. Rod Pumas on March 17th, 2021 9:02 am

    “We’ll have to see once FDLE is done what they have for us,” the superintendent said.

    The above statement attributed to Escambia County School Superintendent Dr. Timothy Smith doesn’t cut it. The District needs to take this more seriously!

    This was a DATA BREACH and there are mandatory Federal and State laws and reporting procedures that must be followed.

    Florida Information Protection Act of 2014. Florida Statute 501.171

    I bet a bunch of attorneys will be on speed dial.

  18. alex on March 17th, 2021 8:54 am

    To the one saying this should just be internally written down as behavior. How do we know this person hasnt changed grades of people she didnt like ect or made people pass that shoulda failed. Theres alot more to this than you think

  19. liza on March 17th, 2021 8:42 am

    I wonder if she changed any grades

  20. KSP on March 17th, 2021 8:36 am

    How incredibly shallow. Beyond the criminal aspect of this is the fact that Homecoming is an absolute waste of time and money. If more attention were paid to education instead of this our schools would be in a much better place.

  21. Fred on March 17th, 2021 8:21 am

    It’s bad enough that this scandal happened, but think of what would have been much worse… if one of them had introduced a virus into the system from email or other file on their computer, the virus could then have inherited district level access to all student records. Can you imagine the heyday identity thieves could have with that kind of access? These two were apparently able to log in from whatever device they were using. Clearly, Carroll’s user account had far more access than she needed to do her job, if she could see any records outside her responsibilities at her school. I think this was a cheap wake-up call for the district to tighten security and access of all user accounts. How many other users have been browsing student records? How many grades have been changed? How many students’ personal information have been stolen? How many have had credit cards opened in their names without their knowledge? This could easily be much more serious than a homecoming queen election.

  22. Bill on March 17th, 2021 8:18 am

    The days of trusting employees that we trust to care for our children are over, the ECSD needs to expand their security.

  23. Bowhunter on March 17th, 2021 7:58 am

    @np630ss I Reckon It Will Be The First Picture To Have A Asterisk Beside It In The Year Book !!!!

  24. Bowhunter on March 17th, 2021 7:53 am

    From Reading This It Look’s Like Miss Goodie 2 Shoe’s Thought Everything Was Funny / Now That She Has Been Expelled I Wonder If She’s Laughing Now !!! What A Shame To Mess Your Life Up Over Greed

  25. Eye in the Sky and on the Keyboard on March 17th, 2021 7:49 am

    EVERYONE should be concerned about all data and files electronically. Never trust 100% any electronic means of communication or online access. If it’s out there…..it can be accessed. Pictures, chats, accounts, cameras…. even your cars data. DUH

  26. Justice on March 17th, 2021 7:12 am

    Remove Emily’s queen designation, expell her from school, put her and her mother in jail.

  27. Northendbratt on March 17th, 2021 6:20 am

    Should parents be concerned?Since this woman,the mother, worked for the school system and had access to the computer base, shouldn’t this just be written down as unethical behavior on her part for giving her daughter access to her work account? Surely there are ways in place for the county to monitor employees computers for suspicious activity?

  28. Anne on March 17th, 2021 6:17 am

    Okay, I get that the Assistant Principals should have access to records and data for kids-parents in THEIR Specific School but WHY in the World would they have access to kids-parent records in Other Schools?
    How many kids-parents information has been looked at and what was done, if anything, with those “looks”???
    SO,,,,,this one case is where we know of this instance, How many others are there that have not been uncovered and revealed?
    Hopefully, the parents-students of those who these two hacked have been informed their records were peeked at or altered, changed…..
    My Gosh what a MESS and all over one of the most trivial things of the High School experience.

  29. np630ss on March 17th, 2021 4:20 am

    I wonder how they will explain this in the school yearbook. Homecoming Queen arrested and expelled. That’s gonna bring back a lot of memories in years to come.

  30. Someone on March 17th, 2021 1:40 am

    this was my old assistant principal at bratt around 4-5 years ago. it’s shocking to see someone you know personally be charged with something like this.