Educational Security Incidents (ESI)

Quick Facts

• Date: 11/15/2009
• Institution: California State Polytechnic University, Pomona
• Type of Incident: Unauthorized Disclosure
• Number Affected: 355
• Source: ESI
• Abstract Source: LA Times

Abstract
California State Polytechnic University, Pomona recently announced that a mistake exposed the personal information of former applicants online. The information, available online for five years, included names and Social Security numbers of 355 applicants from 2003. According to the university, the information was mistakenly placed in a publicly accessible folder in November 2003. The file was removed in November 2008, but the data remained in search engine caches and indexes. Cal Poly Pomona became aware that this information was still, in part, available when a former student discovered his own information while searching Google.

Quick Facts

• Date: 10/14/2009
• Institution: California State University, Los Angeles
• Type of Incident: Unauthorized Disclosure
• Number Affected: 85
• Source: DataBreaches.net
• Abstract Source: KTLA

Abstract
California State University, Los Angeles is working to notify students and faculty after personal information was mistakenly placed online. The information, placed on the Web by a CSULA faculty member, contained the names and Social Security numbers of 82 students and 3 faculty members. The exposure involves individuals enrolled in CIS 454 or 528 in Spring 2002 and CIS 283 and 585 in Spring 2003. The information was the faculty member's web site back in July. Once CSULA became aware of the problem, the files were immediately removed. CSULA is working to notify all affected individuals as well as working to make sure such a mistake does not happen in the future. CSULA College of Business and Economics has setup a toll-free hotline - 800-883-4029 - to help answer questions about the incident.

Quick Facts

• Date: 8/18/2009
• Institution: California State University, Los Angeles
• Type of Incident: Theft
• Number Affected: 600
• Source: OSF DataLoss DB
• Abstract Source: ABC

Abstract
California State University, Los Angeles is investigating a rash of computer thefts that contained the names and Social Security numbers of students and staff. The two computers and 12 laptops were found to contain the names, addresses and Social Security number of more then 600 CSULA individuals. According to the university, the students affected no longer attend the university. CSULA has setup a hotline - (800) 883-4029 - to help answer any questions students and staff have about the thefts.

Quick Facts

• Date: 12/4/2008
• Institution: California State Polytechnic University, Pomona
• Type of Incident: Unauthorized Disclosure
• Number Affected: 675
• Source: Pogo Was Right
• Abstract Source: Pasadena Star-News

Abstract
Cal Poly Pomona is working to alert former students after a file containing personal information was found online. The file, an excel spreadsheet, contained the names, address, phone numbers and Social Security numbers on 675 former Cal Poly Pomona student applicants from 2001. The file was discovered after a former Cal Poly Pomona did a Google search for his name. An investigation by the university found that the breach was unintentional and the file had mistakenly been placed in a publicly accessible folder. According to the university, there is not evidence that anyone other then the student who discovered the file had accessed this information.

Quick Facts

• Date: 7/15/2008
• Institution: California State University, Chico
• Type of Incident: Unauthorized Disclosure
• Number Affected: 30
• Source: SSNBreach.org
• Abstract Source: SSNBreach.org Media Release

Abstract
In May, the Liberty Coalition notified California State University, Chico that it discovered an excel file online that contained student information. The file, placed online in 2003 by a Computer Science professor, contained the names, partial Social Security numbers, test scores and lab scores of 30 students. The information appears to be on former students of Jim McElroy. The university quickly removed the file once notified and the file is no longer available through search engine caches.