Overview

• The Birmingham school disclosed that a spreadsheet was shared on Monday morning between 9:50 and 9:59 during a flu vaccination message to families.
• The file contained names, dates of birth, sex, year and tutor groups, and parent contact numbers for students in Years 7 to 11.
• Staff said they contacted Bromcom, removed the message from My Child At School (MCAS), and attempted to recall the email to limit exposure.
• The incident was reported to the trust’s Data Protection Officer at the Education Data Hub, which has opened an investigation.
• Parents voiced safety concerns, the school urged recipients to delete the file, and there has been no public confirmation of data misuse so far.