Quick Fact

• Date: 12/10/2010
• Institution: University of Wisconsin-Madison
• Type of Incident: Penetration
• Number Affected: 60,000
• Source: DataLoss DB
• Abstract Source: Wisconsin State Journal

Abstract
The University of Wisconsin-Madison recently began notifying individuals following the breach of a server containing personal information. One of the files on the server, which pertained to the UW-Madison Wiscard system, held the names and Social Security numbers of 60,000 students (mostly former), faculty and staff. The file in question held information used for old photo IDs that had the Social Security number of the individual embedded in the ID number. An investigation by university staff did not uncover any evidence that the file was downloaded or accessed by any unauthorized individual.

Quick Facts

• Date: 4/26/2010
• Institution: University of Wisconsin Milwaukee
• Type of Incident: Unauthorized Disclosure
• Number Affected: 33
• Source: DataBreaches.net
• Abstract Source: The UWM Post

Abstract
The University of Wisconsin Milwaukee will soon being notifying former students after an email attachment may have exposed personal information. The email message, sent by the undergraduate program chair for the Department of Geography to 97 geography students, contained an attachment with the names, GPA's and student IDs of 33 former UWM students. The university became aware of the problem after one of the students that received the email contacted the Help Desk. Once notified, the IT department took action and was able to remove the email message from email accounts of 83 of the 97 students receiving the email. The other 14 either had the email message forwarded outside of the university email system or had opened and read the message. University officials contacted these 14 individuals and most indicated they had immediately deleted the email.

Quick Facts

• Date: 4/25/2010
• Institution: University of Wisconsin-Platteville
• Type of Incident: Penetration
• Number Affected: Unknown
• Source: ESI
• Abstract Source: The Badger Herald

Abstract
University of Wisconsin Platteville is currently investigating a computer systems breach. However, UW-P Special Assistant to the Chancellor Barbara Daus said that there has been no compromise of student records, employee information or financial information. While Daus did not give the names of the individuals responsible for the breach, she did state that HR is dealing with the situation internally. At this point it is unknown if the university will contact law enforcement as part of the investigation.

Quick Facts

• Date: 10/12/2009
• Institution: University of Wisconsin, Madison
• Type of Incident: Penetration
• Number Affected: 3,000
• Source: ESI
• Abstract Source: Fox 6 Now
  

Abstract
The University of Wisconsin, Madison recently notified faculty, staff and students after a breach may have exposed personal information. The breach, which involved multiple computers over several months, may have exposed up to 3,000 names and Social Security Numbers. In total, University officials believe that 40 computers were breached and used to distribute illegal copies of music, movies television shows and software. Wisconsin-Madison staff became aware of the breach on August 31 and investigation shows most of the illegal access occurred over the past 18 months. However, the earliest breach occurred in December 2001. In a October 12 letter to affected individuals, University officials say there is no evidence that personal information was accessed.

Abstract

• Date: 4/10/2008
• Institution: University of Wisconsin System
• Type of Incident: N/A
• Number Affected: None
• Source: ESI
• Abstract Source: Gree Bay Press-Gazette

Abstract
A recent audit found University of Wisconsin campuses need to do more to protect the large amount of person data found on these campuses. The audit calls for campuses to hire a computer security officer (if one does not yet exist) and to make data security a priority. To help, the audit suggests campuses create policies that outline what data need protecting and how the data should be protected.