Quick Facts

• Date: 6/8/2010
• Institution: Tufts University
• Type of Incident: Penetration
• Number Affected: 7,000
• Source: ESI, DataBreaches.net(Update1)
• Abstract Source: Blast Magazine
• Update1 Source: New Hampshire Attorney General's Office (PDF)

Abstract
Tufts University recently announced that a virus infection found on several computers could have exposed alumni information. The computers, which were compromised with viruses that could have allowed unauthorized access, contained that names and Social Security numbers of 7,000 alumni. While Tufts does not have any evidence that the files were accessed or downloaded, the university is offering one year of credit monitoring to those affected. Tufts spokesperson Kimberly Thurler stated incident only affected an small number of isolated computers.

Update1
According to the notification sent to the New Hampshire Attorney General's Office, Tufts first noticed that the "torpig" virus was affected two computers on February 18, 2009. Addition infections were detected on March 9, March 16 and April 2. According to the letter, the computers were infected after users visited web sites hosting malicious advertisements. To assist with the investigation Tufts contract with cmd Labs of Baltimore, MD.

Quick Facts

• Date: 10/6/2009
• Institution: Tufts University
• Type of Incident: Penetration
• Number Affected: None
• Source: ESI
• Abstract Source: Tufts Daily

Abstract
An external attack caused Tufts University to shut down their WebCenter service. The attack involved 100 Tufts University computers that were compromised and used to send out spam email messages. According to the University, Tufts staff worked to block attackers coming from three different countries. The attack was discovered on Sunday and continued through Monday as IT staff noticed spikes in traffic from the affected machines. The attack involved computers in the University's Schools of Arts and Sciences and Engineering, the Tisch Library, Undergraduate Education, Student Affairs and Student Services (USS). The attack such a disruption that USS staff were sent home early if they felt they were not able to work productively. University staff worked to reinstall operating systems, increase password complexity and tweaked network controls. The WebCenter service was brought back online yesterday around 9pm.