2026 NZ Ministry of Education — SMART assessment tool exposed 276 student records
Data compromised
Student names, class names, and assessment scores; no contact details, home addresses, or dates of birth per ministry
Technical writeup
Verified ministry disclosure — reported July 21, 2026. New Zealand's Ministry of Education apologized after a technical breach in its SMART (Student Monitoring Assessment and Reporting Tool) platform exposed assessment information for 276 students. Deputy Secretary Geoff Short said the ministry was notified of unexpected access, disabled the affected reporting function, implemented a system update, and restored service. The issue occurred when a small number of users authenticated with trial login details instead of standard Education Sector credentials. Exposed fields were student names, class names, and assessment scores—not contact details, home addresses, or dates of birth. Seven Hawke's Bay schools were contacted; the ministry said it met Privacy Act obligations and is conducting additional reviews.
Root cause
Users signed in with trial login credentials instead of standard Education Sector logins, exposing cross-school assessment data in SMART reporting tool