That distinction is what I was getting at with "if that statement came from the third party (rather than the school district misinterpreting the raw data themselves)".

If the company just provided the raw data, they may be in better legal shape. But I'd say either they or the school administrator libeled the family. Maybe both. (Of course, I'm not a lawyer.) Even if the company did provide only the raw data, I wonder if libel is somehow implied in its contracted/intended use. And I'm really hoping for the legal bloodbath outcome, because this is unconscionable.

The family may not have time or money to pursue this, but there are lawyers who work on contingency or even pro bono, including the ACLU.