2025 Diligent BoardDocs — misconfiguration exposed school-board materials (~64k files in press estimates)

Investigative reporting in mid-2025 described a BoardDocs (Diligent) configuration problem that left a material share of stored board packets—used by U.S. and Canadian K–12 districts—internet-accessible when customers believed materials were private. Diligent was quoted estimating roughly 1% of stored documents, on the order of tens of thousands of files, may have been visible; notifications to clients were said to begin May 30, 2025. Incident framing is unauthorized disclosure via product misconfiguration rather than classic ransomware file encryption.