Personal data of examinees under the Board of Intermediate and Secondary Education—including roll and registration numbers—is supposed to remain restricted to three official government servers. However, over the past four years in Chittagong, sensitive data of more than one million SSC and HSC students, including roll numbers, registration numbers, GPAs, and dates of birth, has become accessible on various private websites. This compromise exposes a vast number of students to severe cyber risks...