Educational Security Incidents (ESI)

Quick Facts

• Date: 6/3/2008
• Institution: Oregon State University
• Type of Incident: Penetration
• Number Affected: 4,700
• Source: ESI
• Abstract Source: Albany Democrat and Herald

Abstract
Oregon State Police are investigating the theft of the theft of online customer information from the Oregon State University bookstore. In total, the theft may affected 4,700 customers that had used credit cards in online purchases. The investigation began in March when a report indicated that 30 individuals may have been affected by a compromise of online orders. Last week the OSU Bookstore received numerous calls and e-mails alleging fraudulent credit card charges almost immediately following orders placed online through the OSU Bookstore. The bookstore immediately took down the affected servers and has worked to notify customers of the incident. According to the Oregon State Police, the incident appears to have originated from outside of the university.

Quick Facts

• Date: 5/16/2008
• Institution: University of Louisville
• Type of Incident: Theft
• Number Affected: 20
• Source: Pogo Was Right
• Abstract Source: The Courier-Journal

Abstract
The University of Louisville has alerted 20 current and former student employees that their personal information, including Social Security numbers, is at risk. According to a university spokesperson, the incident involved documents that were copied and taken from the a private office in the president's office. The incident came to light after an employee salary information was distributed anonymously to employees. The university urged the individuals to place a fraud alerts on their credit reports and monitor the reports for suspicious activity.

Quick Facts

• Date: 4/28/2008
• Institution: University of Tokyo
• Type of Incident: Employee Fraud
• Number Affected: Unknown
• Source: ESI
• Abstract Source: Daily Yomiuri Online

Abstract
University of Tokyo officials moved to dismiss an associate professor after it was discovered this individual leaked graduate school entrance exam questions back in 2006. The former professor shared these questions with several students prior the exam date. It is not known how many students had advanced access to these questions, but it appears that some of the students that received the advance information are still attending the university.

Quick Facts

• Date: 4/22/2008
• Institution: University of Connecticut
• Type of Incident: Unauthorized Disclosure
• Number Affected: 10
• Source: Pogo Was Right
• Abstract Source: WFSB

Abstract
The University of Connecticut is currently investigating how a hard drive filled with personal pictures, documents and information was sold to a student. When Ryan Green installed the hard drive he purchased for $200 from the UConn Co-op, he discovered it contained around 10,000 pictures and 10,000 word documents as well as some sensitive information such as credit card, drivers license and passport information. Green reported this to the Campus Police who launched an investigation into the incident. In all it appears 10 individuals are affected by this incident. One of the individuals, a UConn professor, said he had given the Co-op permission to copy his hard drive when it was in for repair. Police do not expect the investigation to drag out long. According to officials, the Co-op does not resell used hard drives and the staff is cooperating fully with police.

Quick Facts

• Date: 4/17/2008
• Institution: University of Miami
• Type of Incident: Theft
• Number Affected: 2,100,000
• Source: Pogo Was Right
• Abstract Source: Miami Herald
• Update1 Source: Miami Herald

Abstract
The University of Miami announced that a container full of backup tapes containing UM patient data was stolen off the vehicle belonging to an off-site storage company. The backup tapes contained the data such as name, address, Social Security number, health information on tens of thousands of UM patients receiving care from a UM physician or visited a UM facility since January 1, 1999. UM will be notifying the 47,000 patients that had financial information on the tapes by postal mail. The university hired computer security experts Terremark Worldwide to assess the risk to the data. According to Terremark executive Christopher Day, after a week the company was unable to access any of the information of the information. UM has setup a web site - www.dataincident.miami.edu - and a hotline - 866-628-4492 - for any patients with questions about the incident.

Update1
On Friday, the Miami Herald reported that a total of 2.1 million patients were affected by the theft of the backup tapes from Archive America.