Educational Security Incidents (ESI)

Quick Facts

• Date: 10/31/2007
• Institution: Ferris State University
• Type of Incident: Theft
• Number Affected: 18,000
• Source: Pogo Was Right
• Abstract Source: mLife

Abstract
Ferris State University is alerting applicants that their personal information was stored on a laptop stolen from a recruiter's car. The laptop contained the names, address, dates of birth, telephone numbers, e-mail address and academic information on 18,000 2007 and 2008 applicants. According to university officials, the information on the laptops is protected by two levels of user identification and passwords so the risk of identity theft is low. However, the university wants to make sure students are aware of the risks and what steps they can take to protect themselves. Toward this end, the university has created a web site - www.ferris.edu/laptoptheft - as well as a phone line - 800-433-7747 - to help answer questions and provide information.

Quick Facts

• Date: 10/29/2007
• Institution: University of Nevada, Reno
• Type of Incident: Loss
• Number Affected: 16,000
• Source: Pogo Was Right
• Abstract Source: NevadaNews

Abstract
The University of Nevada, Reno is alerting current and former students over the loss of a USB drive containing student information. The drive contained the names and Social Security numbers on 16,000 students enrolled as freshman during the fall semesters between 2001 and 2007. In a letter to affected students, the University offers one year of free identity theft protection. While the university has no evidence that the information is being misused, the university asks anyone that notices fraudulent activity contact the university's police department. The university has created a hot line - 775-784-1600 - to help answer students questions about this incident.

Quick Facts

• Date: 10/24/2007
• Institution: University of Akron
• Type of Incident: Loss
• Number Affected: 1,200
• Source: ESI
• Abstract Source: WKYC

Abstract
The University of Akron is alerting alumni from the class of 1974 that a microfilm containing personal information is missing. The microfilm contained the names, dates of birth, Social Security numbers and other personal information on 1,200 alumni. The reel of microfilm was one of many being digitized by a contractor as part of a university goal to preserve university data. The reel was discovered missing after the contractor returned other reels to the university. Both the university and the contractor were unable to find the missing reel after an "exhaustive search". While the university does not believe the risk of identity theft is high, the university is offering free fraud protection for one year to all affected alumni.

Quick Facts

• Date: 10/23/2007
• Institution: Bates College
• Type of Incident: Unauthorized Disclosure
• Number Affected: 500
• Source: Pogo Was Right
• Abstract Source: The Bates Student

Abstract
Bates College is altering students after two files on the campus network containing financial aid information were found to be accessible to anyone with a Bates username and password. The files, containing information on Perkins Load recipients, contained the names, address, Social Security numbers, financial aid awards and dates of birth on nearly 500 Bates students. The Bates Students, the student newspaper, discovered the files and immediately brought the matter to the college's attention. According to the college's Student Financial Services Office (SFS) the e-mail alert from The Student was never received. However, a second attempt by The Student to contact SFS was successful and the files were removed. According to SFS officials, the files were accessible via a mistake by the college's Information and Library Services Office but would not comment further. According to Bates' Information and Library Services Vice President Gene Weimers and Dean of Students Tedd Goundie this appears to be the first such incident at Bates. Bates officials are currently investigating this incident.

Quick Facts

• Date: 10/23/2007
• Institution: Dixie State College
• Type of Incident: Unauthorized Disclosure
• Number Affected: 11,000+
• Source: ESI
• Abstract Source: The Spectrum

Abstract
Dixie State College is alerting students after an unknown individual access internal files containing student personal information. This incident, which took place in September, involved files containing the names, address, and Social Security numbers of at least 11,000 Dixie State College students that attended the college between 1986 and 2005. Dixie State staff traced the problem to the fact that for the past 14 months these files have been accessible using an internal college search engine. Dixie State officials did verify that the files have been accessed in the past, but are not sure as to the level of exposure. The college is working to alert all affected students. In addition, Dixie State officials urge student to closely monitor their credit reports for fraudulent activity. Dixie State College has created a web site - www.dixie.edu/idprotect - as well as a hotline - 866-295-3033 - and an e-mail address - idprotect@dixie.edu - to help answer any questions about the incident.