Chapter 38 - THE LIST OF CHILDREN
I was furious enough to be careless, so I waited ten minutes before writing an email. That was a rule I had made for myself during the earlier legal disputes: if my hands were shaking, I should drink water, read what I actually knew, and let the first version of a message remain unsent.
Before opening the report again, I wrote down what I was afraid of: that a child's private details might circulate forever, that families would no longer trust our classes, and that Bella would come to regret sharing her drawings. Beside those fears I wrote what the record actually established. The two columns were very different lengths. Keeping them separate did not make me less concerned. It helped me ask useful questions instead of inventing answers. I brought the page to Dana, who read it quietly and suggested we use the same distinction in staff training, without including any child's details. I agreed. Fear was an honest emotion. It simply wasn't a substitute for a verified account.
The access report said a restricted list had been downloaded. It did not say the list had been sold, published, or even opened after download. It did not say Harbor Crest's senior partners ordered it. But the file contained information families had provided for an arts program, and the misuse alone was serious. Dana immediately notified the land trust's privacy counsel. Carmen began documenting which records were affected and what safeguards had failed. The center also prepared direct communications for the families, avoiding an alarming public statement that could disclose more information than the original incident.
'Are you sure you want to stay involved?' my mother asked when I told her. 'Children make people lose their balance.'
'I know. Bella is one of them.'
'Exactly. That's why you need to keep your balance.'
I called Marisol. She listened quietly and then asked whether Bella's personal data appeared on the downloaded list. Her limited exhibition consent was recorded there, but the access logs did not establish that her photograph or home details had been obtained. Marisol said she wanted any required notice in writing, a clear explanation of remedies, and no public naming of the children. Luca joined the conversation after she asked him to. I watched them disagree about whether to tell Bella that night. Neither raised their voice. They settled on telling her the next morning with support from the center's counselor, because she deserved a truthful explanation without being made responsible for adult fear.
The next morning Bella sat between her parents in the classroom, squeezing her stuffed dog. Dana explained that somebody had taken a copy of a file they weren't permitted to take and that adults were working to secure it. Bella asked whether the person knew where she slept. Dana said there was no evidence of that in the affected file, and that the review would continue. Bella asked whether the school was closing. No. Whether she could still draw birds. Yes. Whether she had to speak to a reporter. Absolutely not.
'If I don't want to show pictures anymore, can I stop?' she asked.
'Yes,' Dana replied. 'You can change your mind about future displays.'
Bella thought for a minute. 'I want to keep making pictures. I don't want strangers taking them.'
I had never heard a better description of the work ahead.
At the museum, Mae arranged for a guest specialist to discuss child privacy with our education team. The session was not about the Lakeshore incident; it covered our own procedures and what we could learn. We reviewed old permission forms, storage access, and the difference between documenting attendance and collecting unnecessary personal details. I discovered that one of my old forms requested an emergency contact for a drop-in session where it wasn't needed. We revised it. Being angry at someone else's failure did not relieve me of examining my own.
Meanwhile, Harbor Crest's public relations department issued a statement describing the data download as a 'miscommunication between project partners.' It did not identify which partners had authorized access. Its attorneys later acknowledged that Elise Rowan had used an administrator credential assigned to Voss Heritage Services, but said an internal review remained underway. The land trust requested a list of recipients and deletion certifications while preserving necessary evidence. Investigators were notified where required. We did not announce that every child was in danger. We treated the uncertainty seriously because exaggeration could frighten families without protecting them.
Before the meeting, I sat in a small classroom with three volunteers and helped prepare the translated notices. The first version used the phrase unauthorized credential reuse, which made perfect sense to Carmen and almost none to a parent reading it after a long shift. A bilingual volunteer suggested changing it to: Someone used an old staff login that should have been turned off. We kept the technical term in a separate explanation for people who wanted more detail. The simpler sentence did not hide the problem. It named it more clearly.
A mother called to ask whether she should change her home locks. We explained what the affected files appeared to contain, the limits of the current review, and how to contact the center's privacy specialist with individual questions. We did not dismiss her fear, but we would not feed it with unsupported warnings. She said she had kept her son out of class because she was frightened. Dana arranged for a teacher to send him the week's materials and invited her to discuss a safe return when she felt ready. No one treated her concern as an inconvenience.
I also spoke with the young volunteer who had first noticed the odd access entry. She worried that reporting it had damaged the center's reputation. I told her silence would have been worse. She said she knew that in her head, but it still felt terrible to see cameras outside the building. We sat together until the start of the parent meeting, then carried water and paper cups into the hall. She did not have to become a whistleblower on television. Her duty had been to report what she saw through the right channel. She had done it.
During the meeting a father proposed that the center stop collecting children's names altogether. Carmen explained why certain records were needed for attendance, safety, and authorized family contact. Another parent suggested using temporary numbers for public workshop displays rather than full names. The privacy specialist said the proposal was worth testing. A teenager attending with her mother asked why children couldn't see the data held about them in language they understood. Dana promised to add that question to the policy review. The discussion produced better ideas than any emergency statement written by a public-relations firm.
When the meeting ended, we stacked chairs while families lingered to ask private questions. I noticed that the room hadn't erupted into chaos despite the anger. People had argued, demanded explanations, and listened to one another. The center had lost some trust, but it had not lost the possibility of rebuilding it. A woman thanked Carmen for saying which answers were still missing. Carmen nodded and handed her the next review date. It was a small exchange, but I thought it was the most important event of the night.
The center held an evening meeting for parents. I helped set up chairs and stayed at the back beside Carmen. Some parents were angry. One asked why any marketer could reach a children's list. Another wanted to know whether Lakeshore was selling enrollment records. Dana answered that the review had found no authorized sale and that the access should not have occurred. She admitted that an obsolete administrator credential had remained active despite the new records policy. It was the center's failure, too, and the board would publish the corrective measures.
The hardest question came from a father who worked two shifts. 'You tell us our children matter,' he said. 'Why should we trust you after this?'
Dana did not offer a beautiful answer. She told him the steps the board had already taken and the independent review it would commission. She said he had every right to demand proof. His expression didn't soften, but he stayed for the remainder of the meeting. That seemed more meaningful than winning him over with one sentence.
Afterward Luca waited outside beneath a streetlamp. He had arrived without a car following behind him, carrying two paper cups of tea from the place near my apartment. 'I thought you might not want to talk,' he said. 'So I brought tea instead of questions.'
I leaned against his shoulder. 'I want to talk. I just don't want another person asking me whether I'm okay before I've decided.'
'Understood.'
We stood quietly until my fingers warmed. Then I told him about the father who had challenged Dana. Luca listened and said he wanted to make sure none of his companies kept obsolete credentials in systems containing children's information. His compliance staff would review it independently. I told him that was a better response than offering a donation to make the publicity go away.
May you like
The next day Carmen obtained a deposition notice in a related records case. Elise Rowan had agreed to answer questions under oath. Her lawyer's preliminary letter claimed she did not download the list for marketing at all. She said someone had asked her to find the name of a child who might be connected to the 2008 financing papers.
That child, Elise claimed, was now an adult. And she believed the person had kept a document nobody else could find.
