I think you're thinking of this case [1] from Missouri where a reporter notified the state that teacher SSNs were exposed, and the Governor went ballistic. Luckily, it seems like the local law enforcement set the record straight.

[1] https://apnews.com/article/technology-business-crime-educati...