Quick Facts

• Date: 3/8/2011
• Institution: Western Michigan University
• Type of Incident: Theft
• Number Affected: Hundreds
• Source: ESI
• Abstract Source: WWMT, mLive.com

Abstract
Western Michigan University recently began sending out notifications after a staff member discovered a USB drive was missing. The drive, used for backups in an unnamed WMU department, contained the names, addresses, student ID numbers and Social Security Numbers on hundreds of current and former faculty, staff and students. The drive was discovered missing on January 25 and, according to WMU spokesperson Cheryl Roland, the university is not sure if the drive was stolen or lost. The individuals affected by this incident have been offered 12 months of free credit monitoring. WMU's Public Safety department has investigated the incident but were unable to locate the missing drive.

Quick Facts

• Date: 1/14/2010
• Institution: Western Michigan University
• Type of Incident: Unauthorized Disclosure
• Number Affected: Unknown
• Source: Databreaches.net
• Abstract Source: New Hampshire Department of Justice (PDF)

Abstract
Western Michigan University recently announced the unauthorized exposure of student information on a web site. According to the notification sent to the New Hampshire Consumer Protection Division of the Attorney General's Office, the names, addresses and Social Security numbers for an unreleased number of student workers was available online for "a brief period". Western Michigan contracted with ID Experts to offer 12 months of credit monitoring at no charge.

Quick Facts

• Date: 12/22/2009
• Institution: Western Michigan University
• Type of Incident: Unauthorized Disclosure
• Number Affected: Unknown
• Source: DataBreaches.net
• Abstract Source: New Hampshire Attorney General's Office (PDF)

Abstract
Western Michigan University has notified students after a mistake exposes student information online. According to the letter to the NH Attorney General's Office, student information such as Social Security numbers were inadvertently exposed online for "a brief period of time". The information was discovered on December 14, 2009 and the information was immediately removed. According to the university, there is no evidence the information was accessed, letters were sent out offering those affected a one-year membership in a credit monitoring service by IDExperts.