Educational Security Incidents (ESI)

Quick Facts

• Date: 6/23/2008
• Institution: Southeast Missouri State University
• Type of Incident: Employee Fraud
• Number Affected: 800
• Source: Pogo Was Right
• Abstract Source: KFVS

Abstract
Southeast Missouri State University is working to alert students after it discovered that student personal information may be at risk. During a review of activity logs, the university discovered that a former employee had access hundreds of student records. According to university officials, records of 800 students, which included names and Social Security numbers, were found in the former employee's computer files. The university has filed charges against the former employee. The university has also setup a web site - www.semo.edu/identityalert/ - where students can find more information. Students wish additional questions are encouraged to call - (573) 986-6800 - or e-mail - identityalert@semo.edu - the university.

Quick Facts

• Date: 6/12/2008
• Institution: Columbia University
• Type of Incident: Employee Fraud
• Number Affected: 5,000
• Source: Pogo Was Right
• Abstract Source: Columbia Spectator, NY Sun

Abstract
Columbia University is apologizing to students after it discovered that a file available through a Google-hosted Web site contained personal student information. The file in question, a Housing and Dining database, was apparently uploaded by a student working for the Housing department in 2007. The student information was available from February 2007 through June 3, 2008 when an alumna discovered the personal information through a Google search. The university worked with Google to remove the file from the hosted web site. The university is offering two years of credit monitoring for the affected individuals. A petition circulated by Columbia students condemned the Housing department. The petition also called for department to launch an investigation of the student worker responsible for the incident, publicly disclose the results of the investigation the department is lawfully able to disclose and publicly report the steps the department will take to screen employees' ability to properly handle confidential information.

Quick Facts

• Date: 6/3/2008
• Institution: University of California, Irvine
• Type of Incident: Penetration
• Number Affected: 1,132
• Source: Pogo Was Right
• Abstract Source: ComputerWorld

Abstract
A large number of ID theft crimes affecting University of California, Irvine medical students has been traced back to a data breach at UnitedHeathCare. A total of 1,132 current and former graduate students enrolled in the university's graduate student health insurance program could fall victim to tax scam. So far, 155 of these students have had criminals file false tax returns in the students name an collect the refunds. Only those students enrolled in the insurance program in 2006-2007 are affected. The University of California, Irvine has setup a web site - www.uci.edu/identitytheftalert/ - to answer questions about this incident.

Quick Facts

• Date: 6/2/2008
• Institution: Birmingham City University
• Type of Incident: Theft
• Number Affected: 3,000
• Source: Pogo Was Right
• Abstract Source: Birmingham Post

Abstract
Birmingham City University is working hard to reassure 3,000 current and former employees that there is little risk after the April theft of a tape containing personal information. According to the university, the information on the tape includes names, addresses and dates of birth but did not include any bank account, National insurance or salary information. The tape containing the employee information was stolen from a security van transporting the information to private medical insurance firm Medisure. According to the university, Medisure has been working with the university to notify all affected individuals and the university's human resource department is ready to help answer any questions that affected employees may have.

Quick Facts

• Date: 5/30/2008
• Institution: New Hampshire Technical Institute
• Type of Incident: Loss
• Number Affected: 128
• Source: Pogo Was Right
• Abstract Source: New Hampshire Attorney General Office [pdf]

Abstract
The New Hampshire Technical Institute is working to alert former nursing program students after a USB flash drive was discovered missing. NHTI launched an investigation into the missing flash drive and was unable to determine whether or not the drive contained student information. According to the letter to the New Hampshire Attorney General, the missing drive may contain the names, addresses, phone numbers, e-mail addresses, and Social Security numbers of 128 nursing program graduates from the classes of 2006 and 2007. NHTI is offering 12 months of free credit monitoring to the affected students.