Educational Security Incidents (ESI)

Quick Facts

• Date: 4/26/2006
• Institution: Purdue University
• Type of Incident: Penetration
• Number Affected: 1,351
• Source: Privacy Rights Clearinghouse
• Abstract Source: Purdue

Abstract

Purdue University notified 1,351 current and former graduate students, graduate applicants and a small number of undergraduate that a recent computer breach possible exposed personal information. The compromised computer contained names and Social Security numbers among other information. Purdue has no record that this information was accessed, but cannot rule this possibility out.

Quick Facts

• Date: 4/24/2006
• Institution: University of Virginia
• Type of Incident: Theft
• Number Affected: Hundreds
• Source: Attrition.org
• Abstract Source: The Cavalier Daily

Abstract
The University of Virginia was the victim of multiple computer thefts recently. A computer stolen from one of UVa's academic buildings contained student information, including Social Security numbers. According to university officials, it appears the thieves were after computer equipment and not the data on the hard drives. However, UVa is urging affected students to closely monitor their credit reports for signs of fraud.

Quick Facts

• Date: 4/24/2006
• Institution: University of Texas, Austin
• Type of Incident: Unauthorized disclosure
• Number Affected: 197,000
• Source: InfoSec News
• Abstract Source: ComputerWorld

Abstract

A breach of a computer run by the University of Texas' McCombs School of Business exposed 197,000 records of alumni, faculty, staff and current and prospective students. According to the University, some of these records included Social Security Numbers and "possibly other biographical data". The University's attorney general is working with the UT Internet enforcement unit to ensure that affected individuals are notified and protected from possible identity theft.

Quick Facts

• Date: 4/21/2006
• Institution: University of Alaska, Fairbanks
• Type of Incident: Penetration
• Number Affected: 39,000
• Source: Privacy Rights Clearinghouse
• Abstract Source: Attrition.org

Abstract

The University of Alaska, Fairbanks suffered a computer breach in one of their server computers that contained the names, Social Security numbers, and partial e-mail address for almost 39,000 current and former students, faculty and staff. The University is not sure if the hacker accessed this information. A security sweep located four other poorly secured server which were taken off line until they could be properly secured.

Quick Facts

• Date: 4/21/2006
• Institution: University of Southern California
• Type of Incident: Penetration
• Number Affected: 275,000
• Source: InfoSec News
• Abstract Source: North County Times

Abstract

Eric McCarty, 25-year-old from San Diego, is charged with breaking into the online application system of the University of Southern California. This system contains the Social Security numbers and dates of birth of over 275,000 prospective students that applied to USC between 1997-present. McCarty, who works as a penetration tester and network administrator, allegedly exploited a vulnerability in the application system's database to gain access.