Missouri Treasurer’s Office Faces Questions After MOScholars Student Data Leak

Newly released emails show the Missouri State Treasurer’s Office knew in April that spreadsheets posted on its website exposed information about students receiving MOScholars scholarships, according to reporting published July 27, 2026, by the Missouri Independent.

The emails, obtained under Missouri’s Sunshine Law, show the office sent a draft statement to the state’s seven educational assistance organizations on April 20, two business days after it was alerted to the exposure. The office characterized the information as limited directory information and attributed responsibility to its software contractor. The contractor, ClassWallet, disputed that account.

The records leave unresolved questions about who handled the files, how they reached the state website, how long the information was accessible and what safeguards were used before publication.

The issue has statewide significance because MOScholars is Missouri’s K-12 scholarship program. The state treasurer is responsible for the program’s public reporting duties, while educational assistance organizations, software vendors and participating families provide or rely on information used to administer scholarship accounts.

What the spreadsheets exposed

The files included student names, parents’ email addresses, schools, vendors paid through the program and scholarship amounts. The combination of those categories could identify students and families even if more sensitive information was not included.

The Missouri Independent reported that one spreadsheet used a Microsoft Excel PivotTable and that underlying records could be reached through the table. File markers also suggested that the spreadsheet passed through the computer account of Trent Blair, the Treasurer’s Office director of programs, before publication. That is an indication in the records, not a final finding about who created, uploaded or published the file.

The available reporting does not establish that every MOScholars participant was affected. It also does not establish that the disclosure was intentional or that Missouri authorities have issued a final finding that the law was violated.

How the office described the incident

The draft statement prepared for the seven educational assistance organizations described the exposure as “limited to directory information” and cited federal guidance characterizing such information as not generally harmful or an invasion of privacy if disclosed.

The records reported by the Missouri Independent show that the exposed files paired student names with parents’ email addresses and scholarship amounts. The reporting also noted that scholarship amounts could reveal additional information in some cases, including whether a student qualified for a higher award associated with an individualized education plan.

The statement attributed the problem to the contracted application and fiscal-management platform. ClassWallet spokesperson Jason Hart disputed that characterization, saying the company provided the state with complete, unredacted data exports and that decisions about how the data was handled or displayed publicly were made by the state client. The dispute does not resolve whether responsibility rested with the contractor, the Treasurer’s Office, the publication process or a combination of those factors.

That distinction matters for families and taxpayers. Although a contractor may operate or support part of the system, the state treasurer remains responsible under Missouri law for privacy compliance involving data in the office’s possession and for the program’s required public reporting.

What Missouri law requires

Section 135.714 of the Missouri Revised Statutes requires the state treasurer to ensure compliance with student privacy laws for data in the treasurer’s possession.

The law also requires annual publication of specified MOScholars information, including scholarship counts, school-level totals, demographic aggregates, average grant amounts, participation duration and amounts remitted to qualified schools. The statute expressly says that no personally identifiable information of any student may be released.

Section 135.714 separately requires the treasurer to collect testing information and publish aggregated test results and graduation rates after the required data-collection periods. The statute therefore calls for public program information in aggregate form, not records that identify individual students or families.

The Treasurer’s MOScholars information page identifies the office’s program reports and lists Section 135.714 among the governing statutes.

Prior oversight findings

A July 2025 audit by the Missouri State Auditor found that improvements were needed in the Treasurer’s Office’s oversight and monitoring of MOScholars. The audit said the office had not conducted an annual audit of MOScholars program accounts as required by state regulations, lacked procedures to adequately review or monitor annual reports submitted by educational assistance organizations and had identified a discrepancy in reported amounts.

Those findings do not establish that the current data exposure resulted from the same deficiencies. They do provide context for questions about how the office supervises outside organizations and vendors involved in a growing statewide program.

In a Treasurer’s Office announcement, the state said MOScholars awarded 6,418 scholarships representing more than $43 million during the 2025-26 school year. The office also reported more than 4,000 new applications for the 2026-27 school year as of an earlier 2026 announcement. Those figures illustrate the scale of the program’s information systems, but they do not show how many people were affected by the spreadsheet exposure.

What remains unanswered

The public records and reporting leave several questions for the Treasurer’s Office, the educational assistance organizations and the contractor:

How long were the spreadsheets publicly accessible?
How many students, parents, schools or vendors were included?
What information was removed, and when?
Were participating families notified?
What review and approval controls apply before MOScholars files are posted?
What responsibility did ClassWallet have for the files and the publication process?
Has the state opened a formal investigation or issued a final finding?
What changes were made after the exposure to prevent personally identifiable student information from being posted again?

For Missouri families using MOScholars, the practical question is whether their information appeared in the files and whether the state will explain what happened. The next accountability step is a clear public accounting of the scope of the exposure, the state’s response and the safeguards now in place to comply with Missouri’s student-privacy requirements.

Sources

Discover more from Interactive News

Subscribe to get the latest posts sent to your email.