This should be reported to your department chair, so that the protected information can be removed from public access immediately and the necessary steps of the Lost, Stolen, or Inappropriately Disclosed Student Records Information Policy at https://www.asu.edu/aad/manuals/usi/usi107-02.html can be followed immediately. Experience has shown that when this occurs, it is generally unintentional. Many people have the mistaken notion that if they do not provide a link to their Web space, it is private. With the powerful search engines that are available today, everyone must ensure that they are using appropriate security measures when placing sensitive information on the Web.
ASU employees who inappropriately post student information to publicly accessible Web space risk losing access to their own ASU Web space.