Educational Security Incidents (ESI)

Quick Facts

• Date: 4/13/2008
• Institution: University of Toledo
• Type of Incident: Unauthorized Disclosure
• Number Affected: 6,488
• Source: Attrition.org
• Abstract Source: Toledo Blade

Abstract
A mistake by a University of Toledo employee exposes employee information to all employees. An employee accidentally moved 44 files containing the personal information of 6,488 University of Toledo employees to an internal server accessible by all UT employees. The files contained payroll information including name, address and Social Security numbers. Most of the information was on employees of UT Health Science Center in 1993 and 1999. The files were discovered by an IT employee the day after they were moved to the wrong folder. While the university believes the chance of anyone accessing the information were slim, officials sent letters to all affected individuals.

Quick Facts

• Date: 8/18/2007
• Institution: University of Toledo
• Type of Incident: Theft
• Number Affected: Over 30
• Source: Pogo Was Right
• Abstract Source: Toledo Blade

Abstract
While investigating the theft of a laptop stolen from the University of Toledo's student recreation center in late June, campus police discover that the laptop contained the names and Social Security numbers on at least 30 students and an unknown number of staff members. The university began sending out letters to students and staff letting them know how to protect themselves against Identity Theft. The laptop was stolen from the office of Judith Campbell, the assistant director of the recreation center. According to Ms. Campbell, the office was locked but the door often does not always close. In addition, campus lifeguards often use Ms. Campbell's office as a shortcut to the stairwell.

Quick Facts

• Date: 8/2/2007
• Institution: University of Toledo
• Type of Incident: Theft
• Number Affected: Unknown
• Source: Pogo Was Right
• Abstract Source: Toledo Blade
• Update1 Source: Toledo Blade

Abstract
The University of Toledo is alerting staff and students over the recent theft of two hard drives from the university's Health and Human Services building. These drives are believed to contain some names, Social Security numbers and grade change information. According to UT compliance and privacy officer, Lynn Hutt, while it does not appear that the information was the target of the theft, the university takes this theft very seriously. All staff members were reminded of the need to always lock office doors, use strong passwords and to store sensitive information on secure university servers.

Update1
UT Associate Professor Thomas Tatchell has been charged with at least one of the hard drive thefts. Tatchell also faces charges of tampering with evidence, unauthorized use of property, obstructing official business, and filing a false report. It seems that while Tatchell claimed to have away from his office since May 2, security cameras recorded him removing the computer and hard drive from his office around 9pm on June 8. However, no arrests have been made involving the theft of the hard drive from Jeanette Espinosa, a secretary in the Health and Human Services building, which police believe occurred between June 15 and June 18.