Amherst

UMass Computer Breach Exposes 20 Years Of Personal Data

Quick Facts

Abstract
The University of Massachusetts Amherst recently announced the breach of a computer containing 20 years worth of student information. The breach, which occurred between September 15 and October 27 oflast year, involved a single sever contain the names, Social Security numbers and a limited amount of credit card information on students that attended UMass between 1982 and 2002. While the university is not releasing the exact number affected, the breach does affect a large number of former graduate and undergraduate students. According to the university, while UMass was aware of the incident last fall, notification was delayed to allow for a full investigation. The university has placed a notice on its web site - www.umass.edu/computerintrusion/legal.html - with more information for those affected by the incident.




UMass Amherst Health Services Computer Server Breached

Quick Facts

Abstract
University of Massachusetts, Amherst officials are investigating the breach of a computer server in the university's University Health Services department. The breach by an unknown individual occurred April 11th. According to officials, most patient files are kept on paper, but some patient information was available on the server and the 150 computers in UHS. The university shutdown the UHS network and all UHS computers once the breach was discovered. According to a note on the main UHS web site - www.umass.edu/uhs - about 90 machines have been turned back on and the rest are expected to be operational within one week. Campus officials say it will be weeks before the university is able to determine what, if any, information was compromised but that the university is also looking at the security of all campus systems to help avoid future problems.