Month of January, 2006
Stolen Desktop Computer Contains 12,000 Student Records
Quick Facts
- Date: 01/27/2006
- Institution: College of St. Scholastica
- Type of Incident: Theft
- Number Affected: 12,000
- Source: Attrition.org
- Abstract Source: Duluth News Tribune
Abstract
A desktop computer was recently stolen from a locked office within the College of St. Scholastica's Information Technology Department. The names and Social Security numbers of 12,000 CSS students were stored on this computer. While CSS has since retrieved the computer, there is still a chance the information might have been accessed. CSS does not believe that anyone did, in fact, access this information but is alerting affected student just to be safe. CSS urges any affected student to monitor their credit reports for unusual behavior.
Stolen Laptops Contained Patient Medical Data
Quick Facts
- Date: 1/24/2006
- Institution: University of Washington
- Type of Incident: Theft
- Number Affected: 1,600
- Source: Privacy Rights Clearinghouse
- Abstract Source: Seattle Post-Intelligencer
Abstract
Two laptops containing 1,600 patient records were stolen from a UW Medical Center off-campus office. Contained on these laptops were names, addresses, Social Security numbers, maiden names, birth dates, diagnosis and other personal data. Only one of these laptops protected this information with password access. The University also released that no detailed medical records were disclosed due to this theft.
Notre Dame Donor Computer Breached
Quick Facts
- Date: 1/23/2006
- Institution: Notre Dame
- Type of Incident: Penetration
- Number Affected: Unknown
- Source: Privacy Rights Clearinghouse
- Abstract Source: C|Net News.com
Abstract
Notre Dame is investigating the compromise of a computer containing financial information from school donors. During the compromise, names, address, Social Security numbers, credit card numbers and check images on an undisclosed number of past and current donors.
Hotel Reservation System Breached
Quick Facts
- Date: 1/21/2006
- Institution: Indiana University
- Type of Incident: Penetration
- Number Affected: Unknown
- Source: Privacy Rights Clearinghouse
- Abstract Source: Privacy Rights Clearinghouse Chronology of Data Breaches
Abstract
On Jan 21 an unknown number of credit card numbers was exposed when the reservation system of Indiana University's University Place Conference Center and Hotel was compromised.
Abstract by Privacy Rights Clearinghouse Editors
Four Years Worth of Student Data Publicay Accessible on Web Site
Quick Facts
- Date: 1/20/2006
- Institution: Kansas University
- Type of Incident: Unauthorized disclosure
- Number Affected: Unknown
- Source: InfoSec News
- Abstract Source: The Kansan
Abstract
Students who utilized the KU online housing application system were notified that their private information might have been exposed. Kansas University found that a file containing names, addresses, birth dates, phone numbers, Social Security numbers and credit card number was accessable to the public December 16, 2005. These records exists for any student who used the online application between April 29, 2001 and December 16, 2005.
