Memorial University

[Update1]Security Breach Exposes Memorial University Student Aid Records

By Adam Dodge - Posted on September 8th, 2008

Quick Facts

Date: 9/8/2008
Institution: Memorial University
Type of Incident: Penetration
Number Affected: 90
Source: ESI
Abstract Source: CBC News
Update1 Source: Memorial University

Abstract
Police are currently investigating a breach of a Memorial University of Newfoundland database that exposed the student aid records. The breach, caused by a security hole in an online database, exposed 90 records which could contain student names, Social Insurance numbers, income, and tax information as well as tax information from parents and spouses. The Royal Newfoundland Constabulary is investigating the incident and has been able to trace the breach to a single IP address. At this point it is not clear if this individual was driven by curiosity or more malicious motives. The university immediately took the database offline and repaired the security hole. The university also hired an external company to oversee the security of the service. The breach was discovered when a student, filling out an application, realized they could get access to other student information.

Edit: Corrected typo in report. - Adam

Update1
In a news release on the Memorial University Information Access and Privacy Protection web site, the university assures students that this incident did not occur at Memorial University. The information involved in this incident was contained on the government's online student aid application system. The system held the information on 48,000 individuals and several records were accessed without authorization. The provincial government is working to notify the affected individuals.

Special thank you to Greg Pemberton for pointing out the Memorial University web site explaining the incident. - Adam