Quick Facts

• Date: 3/23/2008
• Institution: Western Carolina University
• Type of Incident: Penetration
• Number Affected: 555
• Source: ESI
• Abstract Source: Asheville Citizen-Times

Abstract
Western Carolina University recently announced that a server containing alumni information was breached by an unknown individual. The server in question contained the names and Social Security numbers of 555 WCU alumni that had signed up for an almuni newsletter. While investigating the breach, WCU was able to determine that the server had been breached numerous times going back to 2006 and the alumni data had been removed from the server. WCU has since handed the case over to the Federal Bureau of Investigations. In a letter [PDF] to the affected alumni, WCU Chancellor John Bardo apologizes for the breach and urges individuals to monitor their credit reports for fraudulent activity. It does not appear that WCU plans to offer these alumni any free credit monitoring.

Quick Facts

• Date: 3/23/2008
• Institution: Western Carolina University
• Type of Incident: Penetration
• Number Affected: 555
• Source: OSF Data Loss Database
• Abstract Source: Citizen-Times (via Attrition.org archive)

Abstract
Western Carolina University are working to notify graduates after it discovered a server containing personal information had been breached. The computer, managed by the university's Department of Business Computer Information Systems and Economics, contained the names and Social Security numbers of 555 WCU graduates that had signed up for a newsletter. WCU discovered the breach during a project to track down and remove private information on unsecured systems. According to Bil Stahl, WCU CIO, the server had been compromised several times as far back as 2006 and there is evidence that the personal information was copied off the server.