Engineer Marcus detects a 60Hz internal crack frequency at Dam Block 4, exposing Apex-Vanguard’s conspiracy to conceal a catastrophic hydropower disaster.
I am the high school district data analyst who was debugging a server sync error at twenty-two-fourteen on a Thursday night, and when I opened the outbound traffic log on the BrightPath integration server I had administered for fourteen months I saw an unencrypted port-eight-thousand-four-hundred-and-forty-three stream sending the depression scores and disciplinary records of fifteen thousand four hundred children — including my own niece and nephew — to a buyer firm called Sentient Analytics, and the fourth record in the scrolling JSON window belonged to a fourteen-year-old sophomore whose PHQ-A score that morning had been entered by a school counselor exactly five minutes before the line of code sold it.
My name is Jolene Trask-Nguyen.
I am thirty-two.
I have been a Data Analyst at the Bridgewater Consolidated School District for seven years.
I administer the district Student Information System on PowerSchool.
I administer the BrightPath Assess platform donated to the district in August 2024.
The platform was donated free of charge by BrightPath Educational Technologies, Inc., headquartered in Austin, Texas.
The CEO of BrightPath, a forty-four-year-old man named Lawson Criffield-Haig, presented the platform in person at the April 2024 Board of Education meeting.
The Superintendent of Bridgewater Consolidated School District, a fifty-seven-year-old man named Vaughan Meriweather-Dale, signed the ninety-four-page Terms of Service that night.
He did not forward the document to legal counsel.
Two months later, the BrightPath Foundation awarded Vaughan Meriweather-Dale a one-hundred-twenty-thousand-dollar Innovation Leadership Fellowship.
The Fellowship funded a three-week trip to Singapore and Helsinki for the Superintendent and his wife in January 2025.
My office is in the basement of the District Office building at 14 Lockridge Avenue.
The room number is B-14.
It is windowless.
It sits one corridor below the cafeteria loading dock.
The fluorescent ceiling fixture has been replaced twice since I took the job.
The desk faces the east wall.
The corkboard is on the wall behind the desk chair.
The corkboard is visible only when someone stands directly behind me.
On Thursday September 18, 2025, at 22:14, I was in B-14 because the BrightPath Assess platform had failed a routine end-of-day sync at 21:47 and the second-period algebra cohort at Bridgewater East could not pull up the morning’s assessment.
The error log on my workstation showed a TLS handshake failure on the district’s internal integration server.
The integration server is a Dell PowerEdge R740 rack unit named BPCSD-INT-01.
It is housed in the locked server room two doors down from B-14.
I ran a remote terminal session into BPCSD-INT-01 under my SIS administrator credential.
I opened the BrightPath integration agent’s local network monitor.
I expected to see the inbound sync queue.
I did not look at the inbound queue.
I looked at the outbound traffic counter.
The outbound counter was running.
At twenty-two-fourteen on a Thursday night, with no classroom in session, the integration server was transmitting at fourteen-point-seven megabytes per minute to an external endpoint.
The destination was an AWS endpoint registered to BP-DBI-Pipeline-Prod.
The port was 8443.
The encryption flag was off.
I opened tcpdump.
I piped the first ninety seconds to a local file on the integration server.
I copied the file back to my workstation.
I opened it.
The payload was JSON.
The JSON was not encoded.
Every line was readable Courier-style structured data.
The first record I read had eleven fields.
The fields were district_id (BCSD), student_id (a six-digit code), school_id (BWE for Bridgewater East), grade (10), gender (F), free_lunch (TRUE), zip4 (23847-4412), iep_code (504-ED), disciplinary_count (2), phqa_score (19), gad7_score (14), package_id (DBI-2025-09-4471), destination_client (sentient_analytics), and a timestamp.
I read the PHQ-A score.
A PHQ-A score of nineteen is in the moderate-to-severe range of the Patient Health Questionnaire for Adolescents.
The cutoff for severe is twenty.
I read the GAD-7 score.
A GAD-7 score of fourteen is in the moderate range of the Generalized Anxiety Disorder scale.
I read the disciplinary count.
Two incidents.
I read the IEP code.
Section 504, Emotional Disturbance accommodation.
I read the destination client.
Sentient Analytics.
I did not know what Sentient Analytics was at twenty-two-fourteen.
I opened a browser.
I searched the term.
Sentient Analytics is a behavioral-prediction firm in Reston, Virginia, that sells juvenile-risk-scoring packages to family health-insurance underwriters in seven states.
Their public website used the phrase “actuarial precision for the under-eighteen risk pool.”
The student in the first JSON record was fourteen years old.
The integration server was selling her depression score to an insurance company.
Her name was redacted from the payload.
The destination client field was not.
I closed the browser tab.
I sat for forty seconds.
I did not move.
At twenty-three-oh-six I opened a Python file on my workstation under the project directory C:\Users\jtrask\bpcsd\monitoring\.
I named the file dbi_capture.py.
I imported socket and json.
I wrote a forty-seven-line script.
The script bound a passive socket listener to the integration server’s outbound interface on port 8443, captured every JSON payload transmitted to BP-DBI-Pipeline-Prod, hashed each payload with SHA-256 for chain-of-custody integrity, and appended the raw JSON plus the hash to an append-only log file on an encrypted USB drive in the locked center drawer of my desk.
The USB drive was a Kingston IronKey D300S, FIPS 140-2 Level 3, fifty-six-character passphrase memorized in 2023.
I tested the script for ninety seconds.
The script captured four transmissions.
The four transmissions covered eleven different student records.
I committed the script to a private Git repository on my personal GitHub account at twenty-three-fifty-three.
At twenty-three-fifty-nine on September 18, 2025, I set the script to run as a background service under my SIS administrator credential.
I locked the desk drawer.
I locked the server-room door.
I locked B-14.
I drove the four miles home to the small house on Pinecrest Drive I share with my mother Linh.
She had left a bowl of phở on the stove with the burner on the low setting.
I ate it standing at the counter.
I did not sit down.
The forty-seven-day clock had started.
Twenty years ago, on Monday March 14, 2005, at fourteen-twenty in the afternoon, I was an eleven-year-old sixth-grader at Bridgewater Middle School standing in the second-floor north corridor outside the social-studies classroom.
A seventh-grade boy named Cody Marsten had a fourth-grader named Hieu Pham in a headlock against the row of green metal lockers.
Hieu was eight.
He was my brother Danny’s friend’s little brother.
He was crying.
The corridor was empty of teachers.
I stepped between them.
I told Cody to let him go.
Cody pushed me.
I pushed back.
Cody fell against the lockers.
He cut his temple on the corner of the latch handle of locker 217.
A teacher named Mrs. Barron came out of the social-studies classroom at the sound.
Mrs. Barron sent me to the office.
Mrs. Barron did not ask what had happened.
My mother Linh, forty, sat in the principal’s office at sixteen-eleven that afternoon.
She had walked from her shift at Wayne Foods Bridgewater poultry-processing plant on Industrial Boulevard.
She was wearing her white work coat under a brown wool car coat.
She did not speak English well enough to read the suspension form.
The principal, a man named Mr. Talbott, slid the form across the desk.
The form was titled “Behavioral Incident — Three-Day Suspension — Aggressive Conduct.”
The form had a small box at the bottom labeled “Permanent Record.”
The box was checked.
My mother signed in the wrong place.
Mr. Talbott pointed to the correct line.
My mother signed again.
She put her hand on my shoulder when we walked out.
She did not say anything in the car.
Three years later, on Thursday September 11, 2008, I was a ninth-grader at Bridgewater East High School in the guidance office of the STEM magnet program.
I was fourteen.
I had applied to the STEM magnet because my eighth-grade algebra teacher Mr. Halpern had told me I belonged in it.
The admissions counselor was a man named Mr. Buckthorne.
He had my middle-school file open on his desk.
He pointed to the 2005 form.
He said, “Aggressive conduct.”
He said, “The magnet program is selective.”
He said, “We have to consider character indicators alongside academics.”
He said, “Your test scores are strong but this is a flag.”
He closed the folder.
He did not look up.
It took me three years.
Between ninth grade and the start of eleventh grade I petitioned the district office four times, requested an expungement hearing twice, sat in front of a district appeals panel once, and wrote a four-page letter that my high school AP English teacher Ms. Carrasco helped me edit.
In September 2010, three days before the start of eleventh grade, the district expunged the 2005 incident from my permanent record.
I entered the STEM magnet program in Grade 11.
I sat for the SAT in October.
I scored a 1530.
I went to George Mason on a full scholarship for the M.Ed. in Educational Measurement.
I came back to Bridgewater in 2019 because I knew what it was like to be a child standing in the second-floor corridor between a bully and the locker latch on locker 217 and have the form in the principal’s office decide the next three years of your life before the principal had read a single line of what had happened.
A child’s data record is not an abstraction.
It is a gate.
On Saturday October 11, 2025, at fourteen-forty-seven, I drove out to Bridgewater East High School to troubleshoot a BrightPath Assess login failure that had blocked the on-campus PSAT prep cohort that morning.
The login failure was a routine token-rotation bug that had affected eleven other districts that week.
I went directly to the guidance office.
The counselor in charge of the PSAT prep cohort was a forty-one-year-old woman named Deirdre LaFleur-Abiodun.
Deirdre had been the Bridgewater East counselor for sixteen years.
She was sitting at her desk with her laptop open.
On her screen, in the BrightPath Assess clinical-screener interface, was the open PHQ-A scoring window for Student ID 08-2247.
The score box at the top of the window read 19.
Deirdre had just entered the score.
The cursor was blinking in the comment field.
Deirdre saw me.
She closed the laptop without saving.
She said, “Sorry — Jolene, I forgot you were coming.”
She said, “Is it the login again.”
I said, “It’s the token rotation.”
I said, “I’ll be three minutes.”
The girl was sitting in the hallway outside Deirdre’s office on the wooden bench beside the water fountain.
She was wearing a gray hooded sweatshirt with the hood up.
She had headphones in.
She was looking at the floor.
I walked past her at fourteen-forty-nine.
She did not look up.
She did not look up.
She did not look up.
I drove back to B-14.
I logged into BPCSD-INT-01.
I opened the dbi_capture.py log file on the IronKey.
I searched for the package_id pattern from the previous month.
I found it.
At fourteen-fifty-two on October 11, 2025, the integration server had transmitted a package containing Student ID 08-2247’s PHQ-A score of 19 to BP-DBI-Pipeline-Prod with destination_client tagged “sentient_analytics.”
The timestamp was fourteen-fifty-two and twenty-three seconds.
Deirdre had entered the score at fourteen-forty-seven.
The transmission had occurred five minutes and twenty-three seconds after entry.
I sat at the desk in B-14.
I did not turn off the lamp.
I did not open another tab.
I read the timestamp again.
The girl had been sitting on the wooden bench at the same moment her score was sold.
I made one decision at fifteen-eleven.
The decision was that the forty-seven-day clock I had started on September 18 was no longer a monitoring window.
It was a chain-of-custody window.
The script would run until it had captured a statistically defensible sample of every buyer firm, every package type, and every grade level in the district.
I gave myself a deadline of November 4, 2025 — forty-seven days from the start of the script.
On November 4 I would submit the package to federal authorities.
I would not tell Vaughan Meriweather-Dale.
I would not tell Lawson Criffield-Haig.
I would tell my mother on the morning of November 4 after the submission was uploaded.
I locked B-14 at sixteen-fifty-two.
I drove home.
I did not stop at the Phước Lộc market on Tenth Street.
I did not call Danny.
My mother was at the kitchen table when I came in.
She was watching a Vietnamese-language drama on the tablet I had given her for her sixtieth birthday.
She paused the show.
She said, “Con ăn cơm chưa.”
I said, “Chưa, Mẹ.”
I sat down.
I ate.
She did not ask me about work.
At twenty-three-fourteen that night I returned to B-14.
The capture script had logged forty-one new transmissions since I had locked the door at sixteen-fifty-two.
I added a new field to the script.
The new field flagged any transmission containing a PHQ-A score above fifteen or a GAD-7 score above twelve.
The forty-seven-day clock continued.
The girl on the wooden bench was still in the dataset.
She would remain in the dataset until November 15.
I did not have the legal authority to stop the pipeline before November 4.
I did not have the standing to call her parents.
I did not know her name.
By the end of the third week the capture script had logged seven hundred and forty-two transmission events.
The dataset on the IronKey contained complete or partial records for nine thousand four hundred and eleven unique students.
The buyer firms had stabilized at three.
Sentient Analytics in Reston, Virginia.
Quorum Predictive in Phoenix, Arizona.
Meridian Talent Futures in Pittsburgh, Pennsylvania.
Sentient Analytics took the depression and anxiety packages.
Quorum Predictive took the disciplinary, IEP, and attendance packages.
Meridian Talent Futures took the academic-performance and behavioral packages tagged for students in grades ten through twelve.
The DBI packages were transmitted in batches every twelve hours.
Every package contained a destination_client field.
Every package contained a SHA-256 hash that BrightPath used for transmission verification.
I copied each hash into a second column of the IronKey log.
The chain of custody was clean.
On Friday October 3, 2025, at seventeen-eleven, I walked the seventy-two-hour capture log from B-14 to the IT Director’s office on the second floor of the District Office building.
The IT Director was a fifty-four-year-old man named Quentin Voll-Abramowitz.
Quentin had been at the district for nineteen years.
He had a daughter in the BrightPath pipeline.
She was a senior at Bridgewater East.
She had a GAD-7 score in the eight-to-ten range.
I did not know that on October 3.
I closed the office door.
I sat in the gray steel chair across from Quentin’s desk.
I set my laptop on the desk.
I turned the screen so he could see it.
I opened the seventy-two-hour log.
I said, “Quentin.
I need you to look at this and tell me what you see.”
Quentin read for nine minutes.
He did not say anything.
He scrolled.
He stopped at the destination_client field on the fourth page of the log.
He scrolled back to the top.
He read the field again.
He set the laptop on the desk.
He said, “This is not a bug.
This is a feature they built into the contract.”
He stood up.
He walked to the wall-mounted firewall console.
He logged in.
He patched the district’s perimeter firewall to mirror every outbound packet from BPCSD-INT-01 to a write-once packet-capture archive on the IT department’s evidence-preservation array.
He did this while I was sitting in the chair.
He set the archive retention to ninety days.
He set the archive permissions to read-only with a SHA-256 lock.
He gave me a copy of the archive token on a printed slip.
He said, “If anybody asks why I patched the firewall I will say it was a routine network-traffic audit triggered by a CISA bulletin.
The CISA bulletin from September 26 is still on my desk.
I am within my professional discretion.”
He sat back down.
He said, “Jolene.
Do not bring this to Vaughan.”
I said, “I know.”
I walked back to B-14.
The capture script had logged six new transmissions while I was upstairs.
On Tuesday October 7, 2025, at twenty-one-thirty, I read the BrightPath Terms of Service for the first time.
The TOS was ninety-four pages.
The TOS was a click-through agreement.
The click-through had been accepted by Vaughan Meriweather-Dale at sixteen-eleven on August 22, 2024, from the IP address registered to the Superintendent’s office workstation.
Pages one through seventy were a standard SaaS service agreement.
Pages seventy-one through eighty-three were Appendix J.
Appendix J was titled “Derived Behavioral Indicators — Research and Commercial Licensing Framework.”
Section 14(c)(ii) on page seventy-three contained the sentence.
The sentence read, in full, in twelve-point Calibri: “The District grants BrightPath an irrevocable, sublicensable, worldwide license to aggregate, de-identify, and distribute Derived Behavioral Indicators for research and commercial purposes, including but not limited to actuarial, employment-screening, juvenile-risk-management, educational-policy, and behavioral-prediction research applications.”
The word “de-identify” appeared in Appendix J seventeen times.
The method of de-identification was not defined in any of the seventeen appearances.
The DBI schema in Appendix J retained zip plus four, school identifier, grade, and gender.
The 2000 Sweeney study at Carnegie Mellon had shown that this exact combination uniquely identifies eighty-seven percent of the United States population.
The 2013 de Montjoye paper had refined the number for adolescent populations to ninety-one percent.
The de-identification claim was a technical fiction.
I printed Appendix J.
I highlighted Section 14(c)(ii) in yellow.
I placed it in a manila folder labeled “BrightPath — TOS Review” in the locked center drawer of my desk in B-14.
On Tuesday October 14, 2025, at oh-nine-thirty, I walked from B-14 to the second floor of the District Office building for a previously scheduled fifteen-minute meeting on the BrightPath Assess fall-semester reporting schedule.
The meeting was with Vaughan Meriweather-Dale.
The Superintendent’s office had a corner window that faced the football field and the chestnut tree on the southern edge of the parking lot.
Vaughan was at his desk with a mug of coffee and a printout of the fall reporting calendar.
I sat in the leather chair across from him.
I said, “Vaughan.
A quick procedural question on the BrightPath MOU from last year.
The Appendix J licensing clause — what was the legal review process on that?”
Vaughan said, “Legal reviewed it.”
He sipped his coffee.
He said, “Standard process — I forwarded it to Ms. Tervalon at Tri-District Counsel.
She signed off.”
He said, “Why.”
I said, “No reason.
I’m just updating the assessment-data-flow documentation for the audit.
Wanted to make sure the licensing language was reviewed.”
Vaughan said, “It was reviewed.
Anything else.”
I said, “No.
That’s all.”
I walked back to B-14 at oh-nine-fifty-one.
At ten-twelve I called Tri-District Counsel.
Ms. Tervalon, the shared part-time attorney, was on the line for two minutes.
I asked her if she had reviewed the August 22, 2024 BrightPath MOU.
Ms. Tervalon checked her case-management system.
She said she had not received the document.
She said she would have flagged Appendix J immediately.
She asked me to forward it to her.
I told her I would forward it after I had completed my own audit.
She said, “Jolene, if there is something off about the Appendix J language, you have a state-law whistleblower-protection statute that covers data analysts.
Please make sure you understand that statute before you do anything else.”
I thanked her.
I hung up.
I did not forward the document.
I added Ms. Tervalon’s two-minute call to the chain-of-custody log on the IronKey.
On Wednesday October 22, 2025, at twenty-fourteen, I ran a query on the IronKey dataset for two specific student records.
My niece Tien, age nine, Bridgewater Elementary, Grade 4.
My nephew Ethan, age six, Bridgewater Elementary, Grade 1.
Both records were in the dataset.
Tien’s record showed three behavioral-incident flags from a single substitute teacher in 2024 and a math-screener score that was being transmitted to Meridian Talent Futures.
Ethan’s record was a baseline literacy score and a single attendance-pattern flag transmitted to Quorum Predictive.
Both children were under thirteen.
Both children were within the COPPA threshold under 15 U.S.C. § 6501.
Their data had been collected by a commercial operator with actual knowledge of their age, because the operator received their grade level in every record.
I called my brother Danny that night at twenty-one-eleven.
Danny was forty-eight.
He was an electrician.
He was at the kitchen table at his house on Ridge Drive with his wife Maria and the kids.
I did not tell him what I had found.
I said, “Danny.
Just keep your kids’ parental opt-out form on the school portal toggled to ‘no third-party data sharing.’
I’ll explain in a couple of weeks.”
Danny said, “Jolene, what’s wrong.”
I said, “Nothing yet.”
He said, “Okay.”
He said, “Mom okay.”
I said, “Mom’s okay.”
I hung up.
On Monday November 3, 2025, at oh-two-fourteen in the morning, I printed the JSON file for Student ID 08-2247 on the laser printer in B-14.
The font was Courier New nine-point.
The printout was one sheet of eight-and-a-half by eleven white paper.
The complete record fit on the single page.
Name field redacted.
PHQ-A nineteen.
GAD-7 fourteen.
IEP code 504-ED.
Disciplinary incidents — October 2024 hallway altercation, January 2025 class disruption.
Free lunch eligibility — TRUE.
Zip plus four — 23847-4412.
School ID — BWE.
Grade — ten.
Gender — F.
Package ID — DBI-2025-09-4471.
Destination client — sentient_analytics.
Transmission timestamp — September 18, 2025, at twenty-two-thirty-one.
I uncapped a red Sharpie at oh-two-fifteen.
I wrote three words at the bottom of the page.
The words were “She is 14.”
I capped the Sharpie.
I pinned the page to the corkboard behind the desk chair in B-14 with a single red pushpin.
The page hung between the FERPA compliance poster from the U.S. Department of Education on the left and the District Assessment Calendar for the 2025–2026 school year on the right.
The score and the sale were the same line of code.
I locked B-14 at oh-two-forty-one.
I drove home.
I slept three hours.
At oh-six-eleven I made the coffee.
At oh-seven-eighteen I opened the five draft submission letters on my laptop.
The forty-seven-day clock had eight hours and forty-six minutes remaining.
At oh-three-fourteen on Tuesday November 4, 2025, I sat at the kitchen table at the small house on Pinecrest Drive with the laptop open in front of me.
My mother Linh was asleep in the room down the hall.
The capture script had logged its final transmission at oh-one-fifty-eight.
The IronKey held the complete forty-seven-day dataset.
One thousand two hundred and forty-seven transmission events.
Fifteen thousand four hundred unique student records.
An average of four-point-eight transmissions per record.
SHA-256 hashes for every transmission.
A read-only mirror at the district IT department under Quentin’s signature.
The folder on the desktop was named “DBI-Submission-2025-11-04.”
It contained five subfolders.
I opened the first subfolder.
The folder was addressed to the U.S. Department of Education Family Policy Compliance Office, the federal FERPA enforcement authority under 20 U.S.C. § 1232g(b), care of Chief Investigator Emmanuella Okoro-Steinfeld at the FPCO secure-upload portal.
The complaint body was eleven pages.
The exhibits were the IronKey dataset dump, the SHA-256 manifest, Appendix J Section 14(c)(ii), the BrightPath MOU click-through audit log, and the Meriweather-Dale Innovation Leadership Fellowship payment records I had pulled from the BrightPath Foundation’s IRS Form 990 in October.
I attached the files.
I clicked submit.
The portal returned receipt number FPCO-2025-INV-4471 at oh-three-fifteen and twelve seconds.
I opened the second subfolder.
The folder was addressed to the FTC Bureau of Consumer Protection at the consumer-protection complaint portal, care of Attorney Solange Baptiste-Kirchner.
The complaint cited COPPA, 15 U.S.C. § 6501 et seq., for the data of the four thousand three hundred and twelve students in the dataset who were under thirteen years of age — including my niece Tien, nine, and my nephew Ethan, six.
The complaint cited FTC Act § 5, 15 U.S.C. § 45, for the data of the remaining eleven thousand and eighty-eight students between thirteen and eighteen.
The exhibits included a separate child-by-child age-stratification report I had generated the previous afternoon.
I attached the files.
I clicked submit.
The portal returned receipt number FTC-CRC-2025-09-1142 at oh-three-twenty-one and forty-one seconds.
I opened the third subfolder.
The folder was addressed to the state Attorney General Consumer Protection Division and cited the state student-privacy statute.
The state statute provided a private right of action and AG enforcement authority.
I attached the same dataset and the additional state-court venue exhibit drafted under Ms. Tervalon’s guidance on the previous Friday afternoon.
The portal returned receipt at oh-three-twenty-six and eighteen seconds.
I opened the fourth subfolder.
The folder was addressed to the FBI Cyber Division at the Internet Crime Complaint Center IC3 portal.
The complaint cited the Computer Fraud and Abuse Act, 18 U.S.C. § 1030(a)(4), against Lawson Criffield-Haig and BrightPath Educational Technologies, Inc., for unauthorized commercial exploitation of a school district’s Student Information System data through the BrightPath integration agent.
The complaint argued that the MOU’s authorization for “research and commercial purposes” did not authorize the commercial-sale data pipeline because the de-identification representation in the MOU was technically false.
The portal returned receipt at oh-three-thirty-one and four seconds.
I opened the fifth subfolder.
The folder was addressed to the DOJ Civil Rights Division Educational Opportunities Section.
The complaint cited Title VI of the Civil Rights Act of 1964 and the disparate impact of the BrightPath pipeline on the Bridgewater CSD student population — seventy-eight percent free-lunch eligible, fifty-one percent students of color.
The exhibits included the demographic breakdown of the fifteen thousand four hundred student records.
The portal returned receipt at oh-three-thirty-six and twenty-two seconds.
I closed the laptop at oh-three-thirty-eight.
I did not move from the kitchen table for the next forty-one minutes.
My mother came into the kitchen at oh-four-nineteen.
She had heard me typing.
She made tea.
She sat across from me.
She did not ask what I had done.
She said, “Con đã làm xong chưa.”
I said, “Vâng, Mẹ.”
She nodded.
She drank the tea.
The first response came at oh-nine-fourteen on Tuesday November 4, 2025.
Chief Investigator Emmanuella Okoro-Steinfeld of FPCO called my district extension.
The call was on speakerphone in B-14.
I had the door closed.
She said, “Ms. Trask-Nguyen.
I have read the complaint and the exhibits.
We are opening an enforcement investigation under 20 U.S.C. § 1232g.
The FTC has reached out to our office this morning.
The FBI Cyber Division has issued a preservation letter to BrightPath’s AWS counsel at oh-eight-forty-seven.
I need you to maintain the integrity of the dataset and the chain of custody.
Do not communicate with BrightPath or the Superintendent until you hear from me.
We will coordinate the on-site evidence collection in the next ten days.”
The four other agencies were already moving in parallel.
By Wednesday November 5 at fifteen-eleven, the FTC had served a civil investigative demand on BrightPath Educational Technologies, Inc. at its Austin office.
By Thursday November 6 at oh-eleven-thirty, the FBI Cyber Division had executed a preservation order against the AWS S3 bucket “bp-dbi-pipeline-prod” and imaged fourteen months of stored DBI packages.
The image contained one hundred and thirty-eight thousand eight hundred and ninety-two transmission packages.
The destination-client fields confirmed three buyer firms.
Sentient Analytics had received eighty-four thousand one hundred and twelve packages.
Quorum Predictive had received thirty-one thousand four hundred and seven.
Meridian Talent Futures had received twenty-three thousand three hundred and seventy-three.
The total invoiced licensing revenue across the three buyers across the fourteen months totaled four million seven hundred and twelve thousand dollars.
On Saturday November 15, 2025, at oh-six-hundred Central Time, U.S. District Judge Marcellina Espinoza-Bratton of the Western District of Texas signed an emergency injunctive order requiring BrightPath Educational Technologies, Inc. to cease all DBI transmissions immediately and to preserve all corporate records.
At oh-six-eleven the order was served at BrightPath’s Austin headquarters.
At oh-six-fourteen FBI Cyber Division agents entered the building.
At oh-six-forty-seven Lawson Criffield-Haig was located in his second-floor corner office.
At oh-eight-twelve Criffield-Haig appeared on television outside the BrightPath HQ in a navy suit jacket and an open-collared white shirt with an FBI agent at his right shoulder.
He said into the assembled cameras, “BrightPath built a product to fix a broken testing system.
We believed the data was anonymized.
We are cooperating fully with the federal authorities.”
He did not say more.
The FBI agent walked him to the unmarked sedan in the loading bay.
He was not under arrest.
He surrendered his corporate laptop and his phone to the agent at the door.
At nineteen-eleven on Saturday November 15, the Bridgewater CSD Board of Education convened an emergency executive session at the District Office.
Vaughan Meriweather-Dale was placed on administrative leave by a six-to-one vote at nineteen-forty-three.
The dissenting member was Board Trustee Wendell Patrice-Coffin, who later told a reporter that “Vaughan was duped, not corrupt.”
The Singapore Fellowship payment records were the line that decided the six votes.
On Sunday November 16, 2025, at oh-nine-eleven, I drove to B-14.
I unlocked the door.
The corkboard was where I had left it.
The single sheet of Courier New nine-point Student ID 08-2247 was still pinned between the FERPA poster and the District Assessment Calendar.
“She is 14” in red Sharpie faced the empty room.
The integration server BPCSD-INT-01 was already offline.
Quentin Voll-Abramowitz had taken it down to the IT department for forensic preservation at oh-six-fifty-three on Saturday morning.
The write-once packet-capture archive was in the IT evidence room under a state-court chain-of-custody seal.
Witness 1 — Quentin Voll-Abramowitz, BCSD IT Director.
Before: he had spent nineteen years patching firewalls inside the district.
Response: at sixteen-forty-eight on Saturday November 15 he forwarded the write-once archive token to the FBI Cyber Division case agent and counter-signed the chain-of-custody form.
After: he requested and received Board approval for a permanent BCSD Data Privacy Officer position at the November 18 emergency meeting and asked the Board to consider me for the role.
Witness 2 — Deirdre LaFleur-Abiodun, Bridgewater East counselor.
Before: she had entered Student ID 08-2247’s PHQ-A score at fourteen-forty-seven on October 11 without knowing the score was being sold.
Response: at thirteen-fourteen on Monday November 17 she filed a written declaration with FPCO confirming she had never been informed that BrightPath Assess clinical screener data was being transmitted to commercial buyers.
After: she joined the Bridgewater Education Association working group that drafted the new district student-data-privacy policy.
Witness 3 — Ms. Tervalon, Tri-District Counsel attorney.
Before: she had not received the BrightPath MOU on August 22, 2024.
Response: at oh-nine-thirty-eight on Wednesday November 5 she filed a sworn affidavit with the state AG confirming she had no record of the document and that her formal review process required a separate signed engagement letter, none of which had been generated for the BrightPath MOU.
After: she opened a parallel state-court breach-of-fiduciary-duty action against Vaughan Meriweather-Dale on behalf of the district.
The forty-seven-day capture window was closed.
The pipeline was severed.
The buyers’ databases were sealed under FTC consent-decree negotiation.
The Board would meet again on November 18.
The dataset on the IronKey would be cited in every federal filing for the next nine months.
The single sheet of Courier New nine-point on the corkboard would not move.
On Thursday April 14, 2026, at fourteen-eleven in the afternoon, Judge Marcellina Espinoza-Bratton sentenced Lawson Criffield-Haig in the U.S. District Court for the Western District of Texas.
Criffield-Haig had pleaded to one count of wire fraud under 18 U.S.C. § 1343 and one count of unauthorized commercial access under 18 U.S.C. § 1030(a)(4).
The plea included a stipulated factual basis acknowledging that the “de-identification” representation in the BrightPath MOU was technically inadequate and that BrightPath had received four million seven hundred and twelve thousand dollars in licensing revenue from the three buyer firms.
He received twenty-eight months at the federal camp at Bastrop, Texas, and a personal disgorgement of two million one hundred thousand dollars.
BrightPath Educational Technologies, Inc. entered a corporate plea to violations of COPPA and FTC Act § 5; total corporate fine twelve million dollars; the company was wound down by court-appointed receiver Maxine Brunetti-O’Sullivan and ceased operations on July 18, 2026.
Vaughan Meriweather-Dale resigned from Bridgewater CSD on December 11, 2025.
On June 22, 2026, he pleaded to one count of honest-services fraud under 18 U.S.C. § 1346 in connection with the one-hundred-twenty-thousand-dollar Innovation Leadership Fellowship.
He received fourteen months of federal probation and forfeiture of the fellowship.
He surrendered his state superintendent license to the state Board of Education on July 7, 2026.
He moved to a small town in Oregon to live with his sister.
He has not returned to public education.
Sentient Analytics entered a settlement with the FTC on March 14, 2026, agreeing to destroy all DBI databases originating from BrightPath and to submit to a ten-year monitorship.
Quorum Predictive entered a parallel consent decree on March 21.
Meridian Talent Futures entered a parallel consent decree on April 2.
The three firms collectively destroyed their BrightPath-derived DBI databases under federal monitor supervision on May 19, 2026.
The data was already in the system.
Sentient Analytics had incorporated DBI scores into three thousand two hundred family health-insurance risk profiles across seven states in the fourteen months before the injunction.
The actuarial models at the insurers had absorbed the scores and re-derived new premium schedules.
The FTC consent decree required Sentient Analytics to notify the insurers of the contamination and to support remediation.
The insurers’ actuarial pass-throughs were not reversible at the individual-policy level.
The FTC retained an independent actuary, Dr. Ifeoma Akinwale-Padilla of the University of Pennsylvania, to estimate the population-level impact.
Dr. Akinwale-Padilla’s final report on June 30, 2026 estimated that approximately eight hundred and forty families in the Bridgewater CSD catchment area were paying elevated health-insurance premiums attributable to the DBI data, with a population-mean premium increase of nine-point-one percent and a maximum observed individual increase of nineteen-point-four percent.
The report could not reverse-engineer individual cases.
The state Department of Insurance announced a non-traceable settlement fund of two million dollars in October 2026.
Student ID 08-2247’s family received a 2025 plan-year premium increase of eleven percent from their health insurer in January 2025.
The premium increase was attributed by the insurer to “regional risk adjustment.”
The family will never know the real reason.
The settlement fund will not, on the record evidence, allow the family to be located by name.
Three of the fifteen thousand four hundred students whose data was sold have, as of October 2026, encountered the downstream consequences in specific documented ways.
A seventeen-year-old senior at Bridgewater East was denied a summer-internship background-check verification by an employer that subscribed to a Meridian Talent Futures pre-screening service; the denial was retracted in March 2026 after the settlement.
A sixteen-year-old at Bridgewater West had a juvenile-court intake risk score flagged by a Quorum Predictive-affiliated assessment in November 2025; the score was rescinded after the federal injunction.
The third case is sealed.
I kept my job.
On December 14, 2025, the BCSD Board of Education created the Office of Data Privacy by unanimous vote and named me the inaugural Director.
The salary was a twelve-thousand-dollar increase over my data analyst position.
The office is one door down from B-14 in the District Office basement.
The office is also windowless.
The corkboard from B-14 was moved to the new office wall on December 18.
The room is room B-13.
On Wednesday November 4, 2026 — one year to the day after the oh-three-fourteen submission — the Bridgewater CSD Board of Education met in regular session at the District Office building on Lockridge Avenue at nineteen-hundred hours.
Agenda Item 6.2 was the adoption of the Bridgewater CSD Comprehensive Student Data Privacy Policy.
The policy ran fifty-two pages.
It had been drafted by a working group co-chaired by me, Quentin Voll-Abramowitz, Deirdre LaFleur-Abiodun, the Bridgewater Education Association president Hosanna Beddingfield-Carmichael, and three parent representatives.
Ms. Tervalon and her successor counsel had reviewed every page.
I stood at the lectern.
The board sat at the curved oak table.
The seven trustees had the policy binders open in front of them.
I held a single document protector in my left hand.
Inside the protector was the JSON printout for Student ID 08-2247 — Courier New nine-point on the eight-and-a-half by eleven white sheet, the red Sharpie “She is 14” centered at the bottom of the page.
I did not read from the binder.
I lifted the document protector to chest height.
I turned it so the page faced the trustees.
I said, “Each of you has the fifty-two pages of the policy in front of you.
This is the one page that explains why we wrote it.
A student in this district.
Fourteen years old.
Her depression score was entered by a counselor at fourteen-forty-seven on October 11, 2025, and sold to an insurance company at fourteen-fifty-two.
Her family has been paying eleven percent more for health insurance for the past twenty-two months.
They will never know that this is why.
The policy in front of you does not give them back the twenty-two months.
The policy is so that there is not a fifteen-year-old version of this page next October.”
Trustee Wendell Patrice-Coffin asked one question.
He said, “Where is the page going to live.”
I said, “In the Office of Data Privacy.
On the corkboard.
Behind my chair.”
The Board voted seven to zero in favor of adoption at nineteen-fifty-three.
I walked back down the corridor to B-13 at twenty-eleven.
I unlocked the door.
The corkboard was on the south wall.
The FERPA compliance poster was on the left.
A framed copy of the new BCSD Comprehensive Student Data Privacy Policy was on the right.
I removed the JSON printout from the document protector.
I picked up the single red pushpin from the magnetic tray on the desk.
I pinned the page to the center of the corkboard.
The pushpin held.
The pipeline was closed.
The score was still in the system somewhere.
I locked B-13 at twenty-twenty-two.
I drove home.
My mother was at the kitchen table.
The phở was on the stove on the low setting.
I sat down.
