Two students who allegedly accessed an employee file at the Shenendehowa Central School District on Tuesday are being investigated by state police.
District spokeswoman Kelly DeFeciani said the 15-year-old boys were discovered within hours of the alleged breech of the in-school computer security system.
One of the sophomores sent an e-mail to the high school principal revealing what he had seen.
"He sent an e-mail to his principal saying, 'Look what I have,'" DeFeciani said. "That was at 1 [p.m.] Tuesday, and within two hours we knew who he was."
She said the files were internal records kept on bus drivers for the state Department of Motor Vehicles, including Social Security numbers.
"The district held a meeting with bus drivers [Wednesday afternoon] and told them about the breach and suggested precautionary measures they can take to protect their credit and other information," DeFeciani said.
One of the students has been disciplined in the past for breaking the school's code of conduct with computers, she said. The other teen, while still under investigation, appears not to have been as involved in the incident Tuesday.
"We have many levels of security, including internal and external protection. This information was not accessible outside of the school district," she said.
The student apparently accessed the information as files were being transferred to new servers in the school. She said the student used a password to gain access to the computer in a lab at the school.
"This was a district computer at the high school," she said. "We have roaming profiles which show where the users have been when they are using the school computers. Everyone leaves footprints."
She said state police were called immediately after the principal received the e-mail, and their investigation is continuing.