Educational Security Incidents (ESI)

Quick Facts

• Date: 3/31/2008
• Institution: University of Connecticut
• Type of Incident: Unauthorized Disclosure
• Number Affected: 242
• Source: SSNBreach.org
• Abstract Source: SSNBreach.org News Release

Abstract
SSNBreach.org and the Liberty Coalition discovered yet another university sharing student information via the Internet. In this latest incident, SSNBreach.org announced that an excel file on economics professor Dr. Stiver's web site contained the names, homework scores and grades of 242 students that had enrolled in Dr. Stiver's Economics 242 course. Also included in this file were 8 digit Social Security numbers of 14 students. It appears that the university became aware of this incident before SSNBreach.org. By the time SSNBreach.org notified the university, UConn officials had already removed the files, worked with major search engines to clear the files from caches and had contacted the affected individuals. The university is offering two years of credit monitoring to affected students.

Quick Facts

• Date: 3/28/2008
• Institution: Antioch University
• Type of Breach: Penetration
• Number Affected: 70,000
• Source: Pogo Was Right
• Abstract Source: The Mercury News

Abstract
Antioch University announced that it discovered that an unknown individual(s) had gained unauthorized access at least three times last year to a computer system containing the personal information of current and former students and staff. The breached system contained the names, Social Security numbers, academic reports and payroll documents of 70,000 current and former students, faculty and staff members going back to 1996. The server was taken offline and university officials continue to examine computer security to ensure there are no further vulnerabilities. The university is currently sending out letters to the affected individuals.

Quick Facts

• Date: 3/28/2008
• Institution: Florida State University
• Type of Incident: Unauthorized Disclosure
• Number Affected: 66
• Source: SSNBreach.org
• Abstract Source: SSNBreach.org News Release

Abstract
SSNBreach.org and the Liberty Alliance continue to uncover student information posted on university and college web sites. The latest discovery involved information on 66 Florida State University students. The information found on the FSU Chemistry department web site included names, grades, and 33 Social Security numbers. All of the affected students appear to be former chemistry students of Dr. Steinbock. FSU removed the files immediately upon notification but the files remained available through search engine caches through March 2008.

Quick Facts

• Date: 3/27/2008
• Institution: Bowling Green State University
• Type of Incident: Theft
• Number Affected: Unknown
• Source: Pogo was Right
• Abstract Source: The BG News

Abstract
Bowling Green State University's student newspaper, The BG News, has a brief blurb about the theft of a laptop containing personal information. The laptop, belonging to Professor Mary Natvig, contained personal on students and scholarship recipients from "all over the world". Prof. Natvig reported the theft of the laptop from her unlocked office occurred on Tuesday between 1:15PM and 1:25PM. It is not known at this time exactly what information was contained on the laptop or how many individuals are affected by this theft.

Quick Facts

• Date: 3/27/2008
• Institution: Texas A&M University
• Type of Incident: Unauthorized Disclosure
• Number Affected: 44
• Source: SSNBreach.org
• Abstract Source: SSNBreach.org Press Release

Abstract
Texas A&M University is the latest institution where SSNBreach.org and the Liberty Alliance discovered student information available on the Internet. Files uploaded in November 2000 contained that names, grades and partial Social Security numbers of 44 students enrolled in Dr. Clyde Munster's Fall 1998 AGEN 350 course. Dr. Munster removed the files as soon as he was notified of the incident but copies remained available through March 2008 in major search engine caches.