Quick Facts

• Date: 7/14/2010
• Institution: Oregon State University
• Type of Incident: Penetration
• Number Affected: 34,000
• Source: ESI
• Abstract Source: KVAL

Abstract
Oregon State University recently started to notify employees after a virus may have exposed personal information. The virus, which may have allowed unauthorized access to the information, was discovered on a computer that contained that names and Social Security numbers of 34,000 current and former employees employed between 1999 and 2005. According to OSU officials, it is "highly unlikely" that any of the information was exposed but the university is sending out alerts out of an abundance of caution. In the letters going out this week, the university urges the affected individuals to monitor their credit reports and financial statements for signs of fraud. OSU has setup a web site - http://oregonstate.edu/incidentresponse - and a hot line - 541-737-1007 - to help answer questions about the incident.

Quick Facts

• Date: 6/3/2008
• Institution: Oregon State University
• Type of Incident: Penetration
• Number Affected: 4,700
• Source: ESI
• Abstract Source: Albany Democrat and Herald

Abstract
Oregon State Police are investigating the theft of the theft of online customer information from the Oregon State University bookstore. In total, the theft may affected 4,700 customers that had used credit cards in online purchases. The investigation began in March when a report indicated that 30 individuals may have been affected by a compromise of online orders. Last week the OSU Bookstore received numerous calls and e-mails alleging fraudulent credit card charges almost immediately following orders placed online through the OSU Bookstore. The bookstore immediately took down the affected servers and has worked to notify customers of the incident. According to the Oregon State Police, the incident appears to have originated from outside of the university.

Quick Facts

• Date: 1/31/2008
• Institution: Oregon State University
• Type of Incident: Unauthorized Disclosure
• Number Affected: 33
• Source: SSNBreach.org
• Abstract Source: SSBreach.org Press Release

Abstract
The Liberty Coalition recently informed the University Oregon that an excel file publicly available through the university's web site contained sensitive and personal information on student and staff. The file contained the names, Social Security numbers (19 in total), phone numbers, GPAs, academic majors, and other information on 33 individuals involved in the 2006 NASA Robotics Academy in Maryland. This file was indexed cached by a number of major search engines.

Update 7/31/2009 - This incident involved Oregon State University and was incorrectly attributed to the University of Oregon. I would like to apologize to the University of Oregon for this mistake. ESI would like to thank Don Harris and John Miyake for alerting us to this error.