Educational Security Incidents (ESI)

Quick Facts

• Date: 09/29/2006
• Institution: University of Iowa
• Type of Incident: Penetration
• Number Affected: 14,500
• Source: ESI
• Abstract Source: Iowa City Press-Citizen

Abstract
The University of Iowa has discovered that a computer used in a study on maternal and child health going back to 1995 was breached by computer attackers. Among other things, this computer contained the Social Security numbers on the 14,500 individuals that have participated in this study of the years. UI has sent out a letter to all affected individuals with instructions on how to monitor credit reports and place fraud alerts with the major credit agencies. University officials believe the attack to be the work of individuals seeking a place to store video files for illegal distribution. However, the university has contacted law enforcement and an investigation has been launched.

Quick Facts

• Date: 09/27/2006
• Institution: Sacred Heart University
• Type of Incident: Penetration
• Number Affected: Unknown
• Source: ESI
• Abstract Source: NBC30, Connecticut

Abstract
Stacey Koblinski, a recent college graduate, received a notification from Sacred Heart University that her personal information may have been exposed during a recent computer breach. Making matters worse, Ms. Koblinski was never a student at Sacred Heart University. It seems that Sacred Heart is one of a large number of colleges and universities that purchase student information from testing agencies. Many of these testing agencies still use Social Security numbers as student identifiers. However, ACT and SAT are phasing out the use of student SSNs on standardized tests. Sacred Heart University is still investigating the breach.

Quick Facts

• Date: 09/24/2006
• Institution: Nagasaki University
• Type of Incident: Theft
• Number Affected: 9,000
• Source: Attrition.org
• Abstract Source: The Daily Yomiuri

Abstract
Six laptop computers contain information on 9,000 patients were stolen from Nagasaki University's Hospital of Medicine and Dentistry. Information contained on these laptops includes names, genders, birth dates, and diagnoses of the hospital's hematology devision. These laptops were stolen from a Hospital laboratory. According to university officials passwords had only been set on 2,000 of the records on the laptops. The hospital alerted police as soon as the theft was discovered and officials for the university apologized for the security breach and exposure.

Quick Facts

• Date: 09/22/2006
• Institution: Purdue University
• Type of Incident: Penetration
• Number Affected: 2,500
• Source: InfoSec News
• Abstract Source: FortWayne.com

Abstract
Purdue University notified individuals who attend the university in 2000 about a recently discover security breach. 2,500 alumni were told that their personal information, including Social Security numbers and names, may have been accessed by an unauthorized individual. Purdue officials discovered that a workstation in the chemistry department might have been accessed by an unauthorized individual who installed remote access software on the computer. This computer was found to contain a Feb 2000 files that contained former student information.

Quick Facts

• Date: 09/22/2006
• Institution: University of Colorado, Boulder
• Type of Incident: Loss
• Number Affected: 1,372
• Source: Attrition.org
• Abstract Source: University of Colorado at Boulder

Abstract
Two computers containing student information were discovered to be missing from the University of Colorado at Boulder's Leeds School of Business. These computers were placed in storage last May. The loss was discovered when the Leeds staff removed these computers at the end of August in preparation for the new school year. Social Security numbers, names, and grades were amount the information contained on these laptops. Although the CU-Boulder officials do not believe any personal information has been accessed, the University has notified the 1,372 affected students and setup both a web site and hotline for student that might have questions or concerns over this loss.