Missouri State University

Google Indexes Missouri State University Students Social Security Numbers

Submitted by Adam Dodge on Thu, 2011-03-03 18:42

Quick Facts

Abstract
Missouri State University is working to notify students after personal information was discovered online. Nine lists containing the names and Social Security numbers of 6,030 College of Education students enrolled between 2005 and 2009 were posted to an unsecured server that allowed public Internet access. The lists were initially uploaded between October and November 2010 as part MSU's College of Education accreditation review. The lists were eventually indexed by Google which allowed the contents to show up as part of Google searches. According to Chief Information Officer Jeff Morrissey MSU is taking this breach very seriously and hopes the steps taken by the university will help prevent and misuse of the information. Thus far MSU has:

  • Removed the lists from the public web server and worked with Google to remove the information from Google's systems
  • Contacted all 6,030 individual affected and offered identity theft protection at a negotiated rate of $7/person (~$42,210 total)
  • Notified the Missouri Attorney General of the breach as required by state law
  • Initiated disciplinary action against the employee that posted the information to the unsecured server
  • Begun working with all college deans to ensure that policies and processes in place to secure university information are being followed

Email Attachment Exposes Missouri State University Foreign Student Information

Submitted by Adam Dodge on Wed, 2009-01-21 07:03

Quick Facts

Abstract
Missouri State University is working to contact foreign students after an email was accidentally sent out containing personal information. The email in question was sent out with a spreadsheet attachment containing the names and Social Security numbers and other sensitive information of 565 foreign students enrolled at MSU. The email was sent out to 179 students on January 14 by the directory of international student services. On January 16, another email was sent out asking these students to please delete the email with the attachment. MSU officials hope that the risks are lower since not all of the students had Social Security numbers. However, MSU is currently looking at the feasibility of obtaining insurance for the affected students.

Syndicate content