Educational Security Incidents (ESI)

Quick Facts

• Date: 7/15/2008
• Institution: California State University, Chico
• Type of Incident: Unauthorized Disclosure
• Number Affected: 30
• Source: SSNBreach.org
• Abstract Source: SSNBreach.org Media Release

Abstract
In May, the Liberty Coalition notified California State University, Chico that it discovered an excel file online that contained student information. The file, placed online in 2003 by a Computer Science professor, contained the names, partial Social Security numbers, test scores and lab scores of 30 students. The information appears to be on former students of Jim McElroy. The university quickly removed the file once notified and the file is no longer available through search engine caches.

Quick Facts

• Date: 2/11/2008
• Institution: California State University, Fullerton
• Type of Incident: Theft
• Number Affected: Unknown
• Source: Pogo Was Right
• Abstract Source: The Daily Titan

Abstract
California State University, Fullerton is alerting students after police arrested an individual suspected of stealing mail from the CSUF Student Union and other buildings on campus. The mail stolen by the suspect was found to contain personal information and even a blank check printed in the name of a sorority. CSUF students are expressing concern over the open accessibility of the union's cubbyhole mailing system which allows anyone to come and pickup mail unchecked. Kim Schirm, a child adolescent and development major and Alpha Chi Omega member, suggests that the university utilize locks or pass codes to protect student mail.

Quick Facts

• Date: 1/11/2008
• Institution: California State University, Stanislaus
• Type of Incident: Penetration
• Number Affected: Unknown
• Source: ESI
• Abstract Source: Central Valley Business Times

Abstract
California State University, Stanislaus officials announced today that a dining vendor's computer system was breached exposing student credit card and bank card information to an unknown attacker. The information on the server in question includes credit card numbers, cardholder names and card expiration dates. The exact number of individual affected and the nature of the breach is still under investigation according to university officials. The university police department learned about fraudulent activity of credit cards used at CSU Stanislaus back in November. The investigation led the police to the breached vendor system.

Quick Facts

• Date: 11/28/2006
• Institution: California State, Los Angeles
• Type of Incident: Theft
• Number Affected: 2,534
• Source: Attrition.org
• Abstract Source: CBS2/KCAL9

Abstract
Cal State, L.A. officials recently contacted over 2,500 students, applicants and faculty members and informed these individuals that their identities are at risk. A USB drive containing names, Social Security numbers, campus ID numbers, e-mail address and phone numbers of individuals in the university's teacher credential program was in a purse stolen from a Cal State, L.A. employee's car. According to university officials, it is not known whether or not the thief has accessed this information, but the university is concerned about student identification safety and preventing such an incident from occurring in the future. The university has urged student to contact the major credit bureaus and has also setup a set up a toll-free calling center at (800) 883-4029 and a Web site, www.calstatela.edu/usbincident.

Quick Facts

• Date: 08/01/2006
• Institution: California Polytechnic State University
• Type of Incident: Theft
• Number Affected: 3,020
• Source: Attrition.org
• Abstract Source: San Luis Obispo Tribune

Abstract

A laptop stolen from the home of Cal Poly professor John Mottman contained the Social Security numbers on any student that took Mottman's astronomy or physics lectures between 1994 and 2004. During this period, Cal Poly used Social Security numbers on class lists as unique identifiers. This practice ended in 2004. In fact, Cal Poly is attempting to change its practice of using Social Security numbers altogether. Cal Poly is recommending that any affected student contact one of the three major credit bureaus and request a fraud alert be placed on their credit report.