In Brief The principal of a Florida science and technology charter school has resigned after allegedly writing a $100,000 check to an Elon Musk impersonator using school funds.

Dr Jan McGee, who is listed as a founding board member of Burns Science and Technology Charter in Oak Hill, Florida, told the school's board of directors that she had been fooled by the fake Musk after being "groomed" (in her words) for months. 

"I am a very smart lady. Well educated. I fell for a scam," McGee told the board, according to local news reports. McGee reportedly cut a $100k check to a person she believed was an associate of Musk's to kickstart additional investments of up to $6 million. 

Because McGee was only allowed to write checks up to $50k, the school's business manager noticed and prevented the check from being processed. According to WESH Orlando, McGee had for years wanted to get Musk involved in funding the school, and someone appears to have picked up her ambition. Others testified at the meeting that McGee had been warned by staff she was being scammed. 

Minutes from a March 9 meeting of the Burns Sci-Tech Charter School Board indicate that McGee's actions were already being reviewed at the time, with one board member requesting a performance review of McGee at the next meeting - the one at which she resigned.

McGee apologized at the March 28 board meeting, but three school administrators said they planned to resign if McGee did not, prompting her resignation. 

Oops: DJI forgets to BCC customers on marketing email

Drone maker DJI flubbed a marketing email this week when it put hundreds of customer email addresses into the "to" field instead of BCCing them. Customers took to Reddit to express their dissatisfaction, and a Reg reader tipped us off to the occurrence. 

Redditor MyAnonID told us there were "819 email addresses disclosed in the one I received," and added: "They gave me a $20 credit in my DJI account after a quick complaint via chat." Well, that's something. 

Other customers reported the emails they received - which were directed at recent buyers of the drone maker's Avata model - exposed similar numbers of email addresses, suggesting that several such emails went out. DJI replied in the thread, but only to apologize for the inconvenience, which it said was due to "a glitch in our email distribution system." 

Several Redditors suggested the mistake could be a violation of the GDPR. While that's not immediately clear, Ireland's Data Protection Commission says that such incidents should still be reported to it. The severity of such an incident could determine if it's punishable. ®

https://www.theregister.com//2023/04/03/infosec_in_brief/