Massey University
Massey University Error Allows Students To Access Personal Information Of Others
Submitted by Adam Dodge on Wed, 2009-04-01 17:32Quick Facts
- Date: 4/1/2009
- Institution: Massey University
- Type of Incident: Unauthorized Disclosure
- Number Affected: 200
- Source: OSF Data Loss Database
- Abstract Source: Otago Daily Times
Abstract
A error in Massey University's MyMassey intranet system allowed students to access the personal information of others. The error, discovered by Rawa Karetai, allowed access to the Massey identification numbers, full names, dates of birth, IRD numbers, academic transcripts, contact addresses and phone numbers of almost 200 Massey students. Karetai discovered the error at 10:40PM and reported it to the university's security office. According to Massey CIO Gerrit Bahlman, the error was caused by an operating system patch release. The MyMassey system was taken offline by 1:42AM to allow the university to fix the flaw.
