Educational Security Incidents (ESI)

Quick Facts

• Date: 8/21/2009
• Institution: University of Massachusetts Amherst
• Type of Incident: Penetration
• Number Affected: Unknown
• Source: ESI
• Abstract Source: Telegram.com

Abstract
The University of Massachusetts Amherst recently announced the breach of a computer containing 20 years worth of student information. The breach, which occurred between September 15 and October 27 oflast year, involved a single sever contain the names, Social Security numbers and a limited amount of credit card information on students that attended UMass between 1982 and 2002. While the university is not releasing the exact number affected, the breach does affect a large number of former graduate and undergraduate students. According to the university, while UMass was aware of the incident last fall, notification was delayed to allow for a full investigation. The university has placed a notice on its web site - www.umass.edu/computerintrusion/legal.html - with more information for those affected by the incident.

Quick Facts

• Date: 3/2/2009
• Institution: Univeristy of Massachusetts
• Type of Incident: Employee Fraud
• Number Affected: 16
• Source: Pogo Was Right
• Abstract Source: The Register

Abstract
A former University of Massachusetts IT administrator is facing charges that he illegally accessed 16 student Facebook accounts and stole nude photos. Robert J DeCampos Jr faces 13 misdemeanor counts of unauthorized computer access and one felony count of larceny. According to court documents, DeCampos used student email accounts to gain access to the Facebook accounts where he was able to download the nude photos these accounts contained. DeCampos was fired by the university on October 20, four days after the discovery of the alleged computer trespass.

Quick Facts

• Date: 4/22/2008
• Institution: University of Massachusetts, Amherst
• Type of Incident: Penetration
• Number Affected: Unknown
• Source: ESI
• Abstract Source: CBS 3, Springfield

Abstract
University of Massachusetts, Amherst officials are investigating the breach of a computer server in the university's University Health Services department. The breach by an unknown individual occurred April 11th. According to officials, most patient files are kept on paper, but some patient information was available on the server and the 150 computers in UHS. The university shutdown the UHS network and all UHS computers once the breach was discovered. According to a note on the main UHS web site - www.umass.edu/uhs - about 90 machines have been turned back on and the rest are expected to be operational within one week. Campus officials say it will be weeks before the university is able to determine what, if any, information was compromised but that the university is also looking at the security of all campus systems to help avoid future problems.

Quick Facts

• Date: 1/30/2008
• Institution: University of Massachusetts, Dartmouth
• Type of Incident: Unauthorized Disclosure
• Number Affected: 32
• Source: SSNBreach.org
• Abstract Source: SSNBreach.org Press Release

Abstract
The Liberty Coalition recently alerted the University of Massachusetts, Dartmouth that a file on the university's Computer and Information Science Department's web site contained sensitive student information. The file contained the names, grades, GPAs and socail security numbers of 32 students. The SSNs in the file were partially obscured with the first digit replaced by a zero.