Educational Security Incidents (ESI)

Quick Facts

• Date: 9/19/2008
• Institution: Texas A&M University, Corpus Christi
• Type of Incident: Penetration
• Number Affected: 31
• Source: Pogo Was Right
• Abstract Source: KIIITV

Abstract
Texas A&M University, Corpus Christi announced that it discovered an unknown individual(s) gained access to a TAMU-CC server containing student information. The server in question contained an Economics-2301 class roster from 2004. This roster contained 31 student names and Social Security numbers. TAMU-CC discontinued the use of Social Security numbers as student identifiers in 2007.

Quick Facts

• Date: 3/27/2008
• Institution: Texas A&M University
• Type of Incident: Unauthorized Disclosure
• Number Affected: 44
• Source: SSNBreach.org
• Abstract Source: SSNBreach.org Press Release

Abstract
Texas A&M University is the latest institution where SSNBreach.org and the Liberty Alliance discovered student information available on the Internet. Files uploaded in November 2000 contained that names, grades and partial Social Security numbers of 44 students enrolled in Dr. Clyde Munster's Fall 1998 AGEN 350 course. Dr. Munster removed the files as soon as he was notified of the incident but copies remained available through March 2008 in major search engine caches.

Quick Facts

• Date: 2/15/2008
• Institution: Texas A&M University System
• Type of Incident: Unauthorized Disclosure
• Number Affected: 3,000
• Source: Pogo Was Right
• Abstract Source: Texas A&M Agriculture Communications

Abstract
Texas A&M University System Agriculture Program is alerting current and former staff members that a computer error placed their personal information online for 21 days. The computer records found online contained the names and Social Security numbers of 3,000 individuals in two Texas A&M System agricultural agencies and the College of Agriculture and Life Sciences. Initial analysis of the records indicates that the incident only affected individuals employed after May 1, 1999. According to Texas A&M officials, the records were removed within 30 minutes of discovery. All employees were notified of the incident by e-mail and officials will be contacting affected employee by letter and will offer assistance. The Texas A&M AgriLife program encourages employees with questions or concerns to call the Human Resources office - 979-845-2423 - and directs all employees to a web site - fcs.tamu.edu/money/your_money/fraud.php - on how to prevent fraud.

Quick Facts

• Date: 7/12/2007
• Institution: Texas A&M - Corpus Christi
• Type of Incident: Loss
• Number Affected: 49
• Source: Pogo Was Right
• Abstract Source: Caller-Times

Abstract
For the second time in as many months, Texas A&M, Corpus Christi is alerting students over the loss of personal information. This latest incident involved the temporary loss of a class roster containing the names and Social Security numbers of the 49 individuals enrolled in A&M-CC's Business Law 3310 class. The adjunct professor for the class, Terrell Dahlman, immediately notified School of Business officials and class students when he discovered the roster missing. In an e-mail to students, Dahlman asked each student to check their handouts to see if they accidentally picked up the roster. A student, it turns out, did accidentally pick up the roster and returned the roster to Dhalman during the next class. According to Marshall Collins, vice president for marketing and communications, A&M-CC will not investigate this incident further since the roster was returned. When asked about A&M-CC using Socials Security numbers for identification, Collins replied, "All we have to go by is Social Security numbers. It's one of the fallacies of the system."

Quick Facts

• Date: 6/16/2007
• Institution: Texas A&M - Corpus Christi
• Type of Incident: Loss
• Number Affected: 8,000
• Source: Pogo Was Right
• Abstract Source: Corpus Christi Caller-Times

Abstract
Texas A&M University, Corpus Christi is alerting 8,000 students about the potential loss of their personal information after a professor reported losing a USB thumb-drive on a trip to Madagascar. The thumb-drive possibly contained the Social Security numbers and other personally identifiable information on all students enrolled during the spring, summer and fall of 2006. The professor, the Department of Mathematics Chair, first noticed the drive missing when packing to leave Madagascar after a two week vacation. At this point it is not known why the professor had this type of student data with him on vacation. The University is urging affected student to keep a close eye on their credit reports for signs of misuse and/or fraud.