Educational Security Incidents (ESI)

Abstract

• Date: 4/10/2008
• Institution: University of Wisconsin System
• Type of Incident: N/A
• Number Affected: None
• Source: ESI
• Abstract Source: Gree Bay Press-Gazette

Abstract
A recent audit found University of Wisconsin campuses need to do more to protect the large amount of person data found on these campuses. The audit calls for campuses to hire a computer security officer (if one does not yet exist) and to make data security a priority. To help, the audit suggests campuses create policies that outline what data need protecting and how the data should be protected.

Quick Facts

• Date: 1/28/2008
• Institution: University of Wisconsin
• Type of Incident: Unauthorized Disclosure
• Number Affected: 196
• Source: SSNBreach.org
• Abstract Source: SSNBreach.org Press Release

Abstract
SSNBreach.org notified the University of Wisconsin after it found an Excel file containing student grade information on a UW-Madison web site. The file, belonging to Professor Yu Hen Hu, contained the names, scores and grades of 196 students taking the professors ECE courses between 1994 and 2006. There is no risk of identity theft to the students over this exposure, but grade and other educational information is protected information under current laws.

Quick Facts

• Date: 1/16/2008
• Institution: University of Wisconsin, Madison
• Type of Incident: Unauthorized Disclosure
• Number Affected: 200
• Source: Pogo Was Right
• Abstract Source: The Capital Times

Abstract
The University of Wisconsin, Madison is just now alerting faculty and staff to a breach the university discovered in November. The breach exposed the e-mail addresses, phone numbers and Social Security Number-based university IDs of at least 200 faculty and staff members. This exposure only affected individuals that made purchases from the university's DoIT computer shop. UW-Madison legal counsel Nancy Lynch said the exposure was appears to be inadvertent. According to Brian Rust, UW-Madison's communications manager for the information technology department, UW-Madison delayed notification to ascertain the extent of the exposure and implement corrective controls. Rust also stated that the university complied with state law, which required notification within 45 days.

Quick Facts

• Date: 09/20/2006
• Institution: University of Wisconsin, Whitewater
• Type of Incident: Theft
• Number Affected: Unknown
• Source: ESI
• Abstract Source: Royal Purple News

Abstract
Six laptops were among the equipment stolen from the University of Wisconsin, Whitewater’s Heide Hall. The theft was discovered by Communications Department Chairperson Wilfred Tremblay. Associate Professor Susan Wildermuth was also a victim of this theft. According to Wildermuth, “All my files related to teaching, research, and letters of recommendation were stolen, and identity issues are definitely at risk as well.” It is not known how many students are affected by this theft or what, if any, personal information was exposed. UWW campus police consider this theft to be an open-pending investigation.