Educational Security Incidents (ESI)

Quick Facts

• Date: 3/10/2007
• Institution: University of Idaho
• Type of Incident: Unauthorized Disclosure
• Number Affected: 2,700
• Source: ESI
• Abstract Source: Spokesman Review

Abstract
University of Idaho is apologizing to staff after it discovered that a fund raising file was inadvertently placed onto a public Web site. The file contained the names, Social Security numbers and birth dates of 2,700 staff members. This file was accessible on the Internet for 19 days in late February before the university pulled the file from the Internet and launched an internal investigation. UI is sending explanatory letters to all 2,700 staff affected by the incident. In addition, UI has created a web site - www.vandalidentity.net/default.aspx?pid=97037 - to help answer any questions about the incident.

Quick Facts

• Date: 1/25/2007
• Institution: University of Idaho
• Type of Incident: Theft
• Number Affected: 0
• Source: ESI
• Abstract Source: Seattle Post-Intelligencer

Abstract
The University of Idaho announced the theft of seven laptops valued at over $6,000 over the weekend. Fortunately, the university has concluded that no personal or sensitive information was contained on these computers. However, UI officials are using this theft, along with the recent theft of three desktop computers that exposed 70,000 student records, to help improve information security efforts at the university. These efforts include plans to create secure network storage for student records as well as encrypt all laptop computers. However, according to Chuck Lanham, the director of enterprise computing support, the key issue is awareness. According to Lanham awareness is "being aware of the types of information you're dealing with and asking if it is being put in places that could be made available easily or not so easily."

Quick Facts

• Date: 1/11/2007
• Institution: University of Idaho
• Type of Incident: Theft
• Number Affected: 70,000
• Source: Attrition.org
• Abstract Source: KTVB, Boise, Idaho

Abstract
University of Idaho officials announced that three desktop computers stolen from the University's Advancement Services office might have contain personal information on 70,000 students, employees, donors and alumni. Information on these computers included names, addresses and Social Security numbers. This information was stored on the computers six months before the theft, but it is unclear whether this information still resided on the hard drives at the time of the theft. Notifications are being sent out to over 331,000 individuals whose information may have been included on these computers. The University is increasing both technical and physical security measures and has setup a website - www.identityalert.uidaho.edu - and phone number - (866) 351-1860 - for anyone concerned about the safety of their personal information.