Educational Security Incidents (ESI)

Quick Facts

• Date: 12/12/2006
• Institution: University of California, Los Angeles
• Type of Incident: Penetration
• Number Affected: 800,000
• Source: ESI
• Abstract Source: Washington Post

Abstract
UCLA began notifying 800,000 current and former students, faculty and staff that their personal information, including Social Security numbers, names and addresses, might have been exposed in a recently discovered security breach. Computer security technicians recently uncovered a number of suspicious queries in a databases containing this personal information. It appears the intruder was able to exploit an unknown flaw in the database software to bypass security restrictions and gain access. Even though investigations so far show only a small number of Social Security numbers were accessed, UCLA is urging all 800,000 individuals to contact the three major credit bureaus and monitor their credit reports closely.

Quick Facts

• Date: 2/13/2006
• Institution: California State University - Northridge, University of Michigan, University of California - Los Angeles
• Type of Incident: DDoS attacks
• Number Affected: Unknown
• Source: EDUPAGE
• Abstract Source: Edupage

Abstract

Three men have been charged by federal authorities in a botnet scheme that reportedly netted the three $100,000 and caused $150,000 in damage. According to the indictment, Christopher Maxwell and two unnamed conspirators created a network of computers by illegally accessing networks at California State University at Northridge, the University of Michigan, and the University of California at Los Angeles. Using the network of zombie machines, the men installed adware on users' computers and also launched a denial-of-service attack on the network of Seattle's Northwest Hospital. The attack on the hospital resulted in the monetary damages cited in the indictment and also shut down the facility's intensive care unit. U.S. Attorney John McKay noted that although botnets are often seen as mere nuisances, this case shows that the repercussions from them can be deadly. If convicted, Maxwell could serve 10 years in prison and be fined $250,000.

(CNET, 13 February 2006)

Abstract by EDUPAGE editors