>"Paying out millions of dollars in legal settlements is something the district will care about, and might cost someone their job"

I'd bet this is something the voters will care about, but it's likely to be attributed to some 'innocent mistake', 'communication error', or 'server misconfiguration'. The school district won't lose any revenue, and I doubt anyone will get fired. Maybe a contractor will get scapegoated.

People on HN complain about how reckless private companies are with their data, but bureaucracies are even less accountable.