Educational Security Incidents (ESI)

Quick Facts

• Date: 1/31/2008
• Institution: University of Minnesota
• Type of Incident: Loss
• Number Affected: 3,100
• Source: ESI
• Abstract Source: WCCO

Abstract
University of Minnesota's Reproductive Medicine Center is alerting patients after it became aware of the loss of a USB drive containing patient information. The drive belonged to Dr. Theodore Nagel which he used to store unencrypted and unprotected backups of his computer, which is against U of M regulations. The drive contained the names and infertility treatments of 3,1000 of Nagel's patients dating back to 1999. Nagel reported the loss to the center and has personally written letters of apology to the affected patients.

Quick Facts

• Date: 7/11/2007
• Institution: University of Minnesota
• Type of Incident: Theft
• Number Affected: Unknown
• Source: ESI
• Abstract Source: The Minnesota Daily

Abstract
The University of Minnesota is alerting students after a laptop containing student grade information was stolen from a professors car during a trip to Palo Alto. The laptop, belonging Elizabeth Beaumont of the political science department, contained the names, e-mail address, internal University IDs and grades for students enrolled in Beaumont's classes from fall 2005 until present. While the University has a policy that all non-public information must be encrypted, 70-80% of the political science laptops, including Beaumont's, have no encryption. The University has plans in place to ensure all political science laptops are encrypted by the end of the summer.

Quick Facts

• Date: 10/20/2006
• Institution: University of Minnesota
• Type of Incident: Theft
• Number Affected: 13,000
• Source: < a href="http://www.adamdodge.com">ESI
• Abstract Source: The Pioneer Press

Abstract
University of Minnesota officials announced on Thursday the theft of two university laptops in August. The stolen laptops belonged to U of M's Institute of Technology and contained personal information on more the 13,000 U of M students. Social Security numbers were among the personal student data on these two laptops. While the laptops in question did contain encryption software, university officials report difficulty in getting professors and staff member to use this software.

Quick Facts

• Date: 10/20/2006
• Institution: University of Minnesota
• Type of Incident: Theft
• Number Affected: 200
• Source: < a href="http://www.adamdodge.com">ESI
• Abstract Source: The Pioneer Press

Abstract
Hot on the heals of the university's Institute of Technology laptop theft announcement, University of Minnesota officials announce yet another laptop theft. This laptop was stolen from an art department faculty member in June during this individuals trip to Spain. While the laptop contained student information such as names, student IDs and grades, no Social Security numbers were exposed. University officials say that the university is in the process of training faculty and staff on the importance of information security.

Quick Facts

• Date: 09/08/2006
• Institution: University of Minnesota
• Type of Incident: Theft
• Number Affected: 13,084 (including 603 Social Security Numbers)
• Source: Attrition.org
• Abstract Source: St. Paul Pioneer Press

Abstract
Two computers stolen from desk of a program coordinator within University of Minnesota's Institute of Technology contained personal data on over 13,000 students who joined the University between 1992 and 2006. Birth dates, phone numbers, high school information, grades and test scores were some of the data contained on these laptops. Also on these laptops were the Social Security numbers on roughly 600 students. The University sent out letters on August 30th to notify students of the potential risk. While the University no longer uses Social Security numbers as student identifiers, older records did contain this information.