Educational Security Incidents (ESI)

Quick Facts

• Date: 3/30/07
• Institution: University of Montana - Western
• Type of Incident: Theft
• Number Affected: 500
• Source: Pogo Was Right
• Abstract Source: Havre Daily News

Abstract
University of Montana - Western has begun notifying current and former students about a theft from a UM-Western office. Thieves broke into two faculty offices and made off with several items including cash, personal effects and a computer disk containing student information. According to university officials the stolen disk contained the names, Social Security numbers, address and other information on 500 current and former students that made use of the university's TRIO Student Support Services program. While there has been no evidence to date of any misuse of the information, UM-Western is working to inform students and recommends they take precautionary measures. An investigation by the Dillon policy is ongoing but there are no suspects at this point.

Quick Facts

• Date: 3/29/2007
• Institution: Waseda University
• Type of Incident: Loss
• Number Affected: 972
• Source: Pogo Was Right
• Abstract Source: MSN News

Abstract
A firm hired to print and send letters Waseda University examinees has admitted to losing a disk containing the examinees personal information. This disk contained the names, address and examination numbers of the 972 individuals that passed that commerce faculty entrance examination. According to an official at the printing company, "We don't know where [the disk] is now."

Quick Facts

• Date: 3/28/2007
• Institution: University of Alberta
• Type of Incident: Unauthorized Disclosure
• Number Affected: Unknown
• Source: Pogo Was Right
• Abstract Source: Excalibur Online

Abstract
Students at the University of Alberta are calling for school officials to apologize after a recent incident. A school official accidentally left an Excel file attached to an e-mail sent to all first and second year U of A students. This file contained student names, student ID numbers, grades, class standings and student disciplinary status. Students are upset over this unauthorized disclosure and many are calling on U of A officials to explain why the affected student were not alerted of this problem. The individual responsible for the disclosure did send out a second e-mail stating "I feel ill as I do recognize (the) confidentiality implications" and asked students to delete the attachment. University of Alberta has launched an investigation into this matter but officials declined to comment further until the investigation was completed. Meanwhile, U of A students call the school's lack of notice "unprofessional" and some are asking for a formal apology.

Quick Facts

• Date: 3/13/2007
• Institution: Ryerson University
• Type of Incident: Unauthorized Disclosure
• Number Affected: Unknown
• Source: ESI
• Abstract Source: The Eyeopener

Abstract
Ryerson University students lodged complains last week that certain Ryerson Web sites and e-mails sent by professors violated Canada's Freedom of Information and Protection of Privacy Act (FIPPA). These sites contained listing of student names, student ID number and grades. Posting grades with student ID numbers (with the last 2 digits removed) in public forums is a regular occurrence. However, it is the inclusion of student names along with full student ID numbers that spark student complaints. Ryerson general counsel and secretary to the Board of Governors Julia Hanigsberg urges all students to immediately notify the university if they notice anything they are concerned about.

The ESI Year in Review - 2006 examines all of the information security incidents occurring at colleges and universities around the world as reported in the news during 2006. Below is an example of the information contained in the Year in Review - 2006:

• Total Number of Incidents: 83
• Total Number of Institutions Reporting a Breach: 65
• Total Number of Records Exposed: 2,683,059
• Total Number of Incidents by Type:
  • Theft: 26
  • Impersonation: 1
  • Loss: 3
  • Penetration: 33
  • Unauthorized Disclosure: 20