University of North Carolina
UNCG Announces Security Breach of Health Information
Submitted by Adam Dodge on Mon, 2010-08-09 18:54Quick Facts
- Date: 8/9/2010
- Institution: University of North Carolina, Greensboro
- Type of Incident: Penetration
- Number Affected: 2,500
- Source: ESI
- Abstract Source: UNCG News
Abstract
The University of North Carolina Greensboro recently announced the breach of two computers at two UNCG clinics exposing personal information. The breach involved the breach of a Speech and Hearing Center computer containing the names, Social Security numbers, telephone numbers, insurance company information, insurance ID numbers, group numbers, diagnosis codes, procedure codes and charges for 2,300 individuals going back to 1997 and the breach of a Psychology Clinic computer containing the names, dates of birth, telephone numbers, city of residence and if the individual was insured on 240 individuals. Information was exposed when the the university discovered malware on the computers that could have allowed someone unauthorized access. In the letter affected individuals, the university encourages individuals to monitor their credit reports. Anyone with questions about the Speech and Hearing Center breach may contact the center at (877) 550-6012 while individuals with questions about the Psychology Clinic breach may contact the clinic at (887) 550-6008.
[Update1]Server Containing UNC-Chapel Hill Study Breached
Submitted by Adam Dodge on Thu, 2009-09-24 18:20Quick Facts
- Date: 9/24/2009
- Institution: University of North Carolina - Chapel Hill
- Type of Incident: Penetration
- Number Affected: 160,000 [Updated]
- Source: DataBreaches.net
- Abstract Source: News-Record.com
- Update1 Source: NewsObserver.com
Abstract
The University of North Carolina at Chapel Hill is working to notify thousands of women after a breach of a server containing a medical study was discovered. The server, one of two involved in a 14-year project analyzing mammography results, contained data on 236,000 women including 163,000 Social Security numbers. The breach was detected in July and UNC-Chapel Hill officials hired an outside forensic firm to help investigate the breach. After two months, the University still does not know who is responsible for the breach of if the data on the server was downloaded. According to the chairman of the UNC-CH Department of Radiology Matthew Mauro, the breach have been as much as two years old. The breach has caused the UNC-CH Medial School to reevaluate all computer security measure. The University held off notification letters until the investigation was completed and will soon begin notifying all those affected.
Update1
The recent security breach at UNC-CH was less severe then first thought. According to officials, the files accessed contained information on 160,000 women including 114,000 Social Security numbers. The University has setup a hotline - 877-434-3065 - to help answer questions about the breach and the investigation.
UNC School of the Arts Instructs Students to Monitor Credit Reports
Submitted by Adam Dodge on Sat, 2008-12-20 09:08Quick Facts
- Date: 12/20/2008
- Institution: University of North Carolina School of the Arts
- Type of Incident: Penetration
- Number Affected: 2,700
- Source: Pogo Was Right
- Abstract Source: Winston-Salem Journal
Abstract
The University of North Carolina School of the Arts is working to notify current and former students about a computer breach that may have exposed personal information. The server, which went on line in 2003, contained the names and Social Security numbers of about 2,700 students enrolled between 2003 and 2006. The breach occurred in May 2006 and, according to officials, the school became aware of the breach last week. UNCSA staff is working to investigate the breach and are conducting tests to ensure the future safety of personal information.
[Update1] Employees Notified Following UNC Greensboro Breach
Submitted by Adam Dodge on Mon, 2008-12-15 19:45Quick Facts
- Date: 12/15/2008
- Institution: University of North Carolina at Greensboro
- Type of Incident: Penetration
- Number Affected: 275 (updated)
- Source: ESI
- Abstract Source: UNC Greensboro News Release
- Update1 Source: The News and Observer
Abstract
The University of North Carolina at Greensboro is working to alert current and former employees after a detected a security breach on a workstation containing payroll information. The workstation contained the names, Social Security numbers, bank routing information and bank account numbers on an unknown number of individuals. The incident affects anyone that has received a payment from UNCG since April of this year. The breach was discovered after a payroll employee received a virus alert while trying to open a file on the computer. An investigation into the alert uncovered a virus had been on the computer for eight months which could have allowed unauthorized access to the workstation. UNCG has created a web site - fsv.uncg.edu/incident - with more information on the incident.
Update1
According to UNC officials, the total number of individuals affected by this incident may be as many as 275. This number includes 225 employees and 50 students.
Student Worker Steal UNCC Student Credit Card Information
Submitted by Adam Dodge on Tue, 2007-10-16 09:01Quick Facts
- Date: 10/16/2007
- Institution: University of North Carolina, Charlotte
- Type of Incident: Theft
- Number Affected: 148
- Source: Pogo Was Right
- Abstract Source: WCNC
Abstract
The University of North Carolina, Charlotte is alerting students after an internal investigation reveled that a student working in the financial aid office had been illegally stealing student information contained in these sensitive files. UNCC became aware of the incident after several students complained about fraudulent credit card charges and campus police began to look into the incident. The investigating uncovered that the student worker had stolen several files with the financial records of 148 students. According to UNCC officials, the university takes this matter very seriously but has been asked by the Mecklenburg County District Attorney’s Office to refrain from commenting further.



