top of page

The Reality Behind the Trend of Looking Up Student IDs Using AI: When Convenience Comes with Data Leak Risks

The explosion of Artificial Intelligence (AI) is completely transforming how we work and process information, from content writing and image creation to data analysis. However, accompanying this outstanding convenience are worrying security vulnerabilities. In recent days, a trend on the social network Threads has startled many young people as they witnessed their entire personal information being "exposed" after just a few seconds of searching.

A trend on the social network Threads has startled many young people as they witnessed their entire personal information being "exposed" after just a few seconds of searching.
A trend on the social network Threads has startled many young people as they witnessed their entire personal information being "exposed" after just a few seconds of searching.

The Truth Behind the Trend of Looking Up Student IDs Using AI

It all started when many users tried typing their student IDs into Google's AI-integrated search bar. The results left them bewildered as everything from full names, dates of birth, classes, academic results, hometowns, to national identity card numbers was fully displayed. Minh Chau (22 years old, a student in Hanoi) shared that she was utterly shocked to see almost her entire academic profile appear with just a single click.

However, according to cybersecurity experts, the culprit behind this phenomenon does not actually stem from the AI cracking codes or attacking security systems on its own. Mr. Ngo Minh Hieu (Hieu PC), an information security expert, explained that most of this data had already been publicly available on school websites, in class list PDF files, academic notices, or learning forums beforehand.

In addition, a major cause comes from the habits of the students themselves. In exchange for document downloads on online sharing platforms, many students carelessly uploaded essays, reports, graduation theses, or even class and scholarship lists containing the intact personal information of themselves and other members. When AI tools are integrated into search engines, they scan the Internet, automatically gathering these fragmented pieces of data and quickly organizing them into a complete personal profile.

Mr. Ngo Minh Hieu (Hieu PC) explained that most of this data had already been publicly available on school websites, in class list PDF files,...
Mr. Ngo Minh Hieu (Hieu PC) explained that most of this data had already been publicly available on school websites, in class list PDF files,...

Risks When AI Platforms Collect User Information

Not stopping at public information on the Internet, the nature of current AI systems is to continuously collect, process, and learn from the very data inputted by users.

Colonel, Dr. Huynh Ngoc Liem, an expert who has spent significant time researching AI applications and is the co-editor of the book Bình dân học vụ AI, stated that information security issues when using AI are a common challenge for many nations. When users feed data into AI systems, this information can be integrated and processed at multiple data centers located in different places around the world, causing us to completely lose control over this storage process.

When sensitive data falls into the wrong hands, it becomes the raw material for building highly accurate scam scenarios that are far more sophisticated than the bulk spam texting of the past.

An alarming scenario: Fraudsters could send fake emails impersonating the training department, requesting students to update personal information, verify accounts, or pay additional tuition fees. Because the email contains fully accurate information regarding full names, classes, and student IDs, the victims and their families can easily be psychologically manipulated into believing it is an official notification. This data could also be exploited to guess passwords or execute other high-tech forms of attack.

Reality shows that the issue of high-tech crime prevention and information security is receiving enormous attention from citizens in many localities, especially during voter meetings with candidates for the 16th National Assembly.

When sensitive data falls into the wrong hands, it becomes the raw material for building highly accurate scam scenarios that are far more sophisticated than the bulk spam texting of the past.
When sensitive data falls into the wrong hands, it becomes the raw material for building highly accurate scam scenarios that are far more sophisticated than the bulk spam texting of the past.

Prevention Solutions and Personal Data Protection

To minimize the risk of data leaks in the AI era, experts recommend proactive measures from both organizations and individuals.

For universities:

  • It is necessary to review the entire website system, online document repositories, and public PDF files.

  • Move lists containing personal data such as grades, exam schedules, and academic information to an internal system that requires a login.

  • Restrict the simultaneous publication of both full names and student IDs on the same public document, and proactively block search engines from indexing old content.

For individual users:

  • Change the mindset of using AI: AI should only be viewed as a tool for suggesting ideas, methods, or directions, which users then adjust according to actual needs. Absolutely do not upload sensitive information such as bank accounts, confidential documents, internal documents, or personal data to AI platforms.

  • Protect online identity: Restrict the use of real names when registering accounts on AI platforms or virtual assistants; use a nickname instead. When creating email accounts or accounts on social platforms, consider using another name instead of the full name to avoid being directly linked to the real identity.

  • Proactively check information: Self-search your name or personal ID on Google. If private data is found to be unauthorizedly public, use the reporting feature on document-sharing platforms or send a removal request for search results directly to Google.

  • Basic security principle: Never use information such as student IDs as passwords, security questions, or account recovery information.

AI brings great convenience but is also a "data vacuum" if users are not vigilant. The nature of information leaks through social media trends is not due to the technology cracking codes itself, but stems from subjectivity in data management and uncontrolled information-sharing habits. Raising security awareness and changing habits when interacting with technology is the key to protecting oneself safely in cyberspace.

References: dantri.com.vn, laodong.vn

Comments


40051abd5a76713af8f015988fc6780e-blue-phone-icon-with-a-wave-on-it.webp
whatsapp-mobile-software-icon-png-image_6315991.png
pngtree-minimal-calendar-icon-vector-png-image_21233134.png
Logo-Zalo-Arc.webp
IPSIP logo transparent.png

IPSIP VIETNAM ONE MEMBER LIMITED LIABILITY COMPANY (IPSIP VIETNAM OMLLC)

Tax code: 0313859600

🏢 SH05.01, B4 Street, Saritown Area, An Khanh Ward, Ho Chi Minh City, Vietnam

​☎  +84 918 397 489

  • Linkedin
  • Facebook
  • TikTok
  • Email liên hệ

Our Services

Sign up to receive in-depth cybersecurity documents and news from IPSIP Vietnam.

bottom of page