Educational Security Incidents (ESI)

Quick Facts

• Date: 7/12/2007
• Institution: Indiana University
• Type of Incident: Impersonation
• Number Affected: Uknown
• Source: ESI
• Abstract Source: The Indianapolis Star

Abstract
It appears that an unknown individual gained access to an Indiana University student's e-mail account and used this account to launch a scam aimed at netting the individual money. According to university officials, the scammer used the IU e-mail account to send out as many as 2,000 e-mails claiming to be a "hit man" hired to "terminate" the e-mail recipient. The scammer then offers the recipient a chance of salvation by paying the scammer $8,000. The university has since disabled this e-mail account and UI Police are investigating the scam.

Quick Facts

• Date: 6/2/2007
• Institution: Indiana University
• Type of Incident: Penetration
• Number Affected: 664
• Source: Pogo Was Right
• Abstract Source: Indystar.com

Abstract
Indiana University staff quickly worked to scramble 664 user passwords after the FBI alerted the university that the passwords for these accounts were found on a seized computer. The university contacted each of the affected individuals and is working with them to secure their accounts and their computers. At this time, IU does not know who the seized computer belongs to, what the individual was using the accounts for or what the FBI investigation was about. However, IU was able to determine that the information was stolen from computers by a trojan virus. Of the 664 individuals affected, 511 were students, 151 were hourly employees and the rest were professors and professional staff.

Quick Facts

• Date: 1/21/2006
• Institution: Indiana University
• Type of Incident: Penetration
• Number Affected: Unknown
• Source: Privacy Rights Clearinghouse
• Abstract Source: Privacy Rights Clearinghouse Chronology of Data Breaches

Abstract

On Jan 21 an unknown number of credit card numbers was exposed when the reservation system of Indiana University's University Place Conference Center and Hotel was compromised.

Abstract by Privacy Rights Clearinghouse Editors

Quick Facts

• Date: 11/18/2005
• Institution: Indiana University
• Type of Incident: Penetration
• Number Affected: 5,300
• Source: EDUPAGE
• Abstract Source: FortWyane.com

Abstract

Officials at Indiana University reported that a routine scan of computer systems turned up malicious software on the computer of a faculty member at the Kelley School of Business. According to James Anderson, the school’s director of information technology, the software could have been used to access the personal information of about 5,300 current and former students at the university, though no reports have surfaced that the information was used illicitly. The school has notified the students who are possibly affected and encouraged them to monitor their credit reports for suspicious activity. Daniel Smith, dean of the Kelley School, said all of the institution's computers are being audited to ensure they are free of malicious software and have current antivirus and system patches installed.

Abstract by Edupage Editors