Unauthorized Disclosure

Error Exposes Trinity College Dublin Student Data To Campus Network

Submitted by Adam Dodge on Fri, 2011-04-29 18:26

Quick Facts

Abstract
Trinity College Dublin recently announced the discovery of a file containing student and information was available to anyone on the college network. The file, which was accessible between August 2009 and March 2011, contained the names, addresses, ID numbers and email addresses of TCD students and staff. In the announcement to those affected, TCD officials stressed the fact that the file was not accessible via the Internet, only the campus network. As required by data privacy legislation, TCD reported this incident to the Data Protection Commissioner.

File Cabinet Containing Central Ohio Technical College Student Records Found At Storage Facility

Submitted by Adam Dodge on Mon, 2011-04-18 18:33

Quick Facts

Abstract
Central Ohio Technical College recently notified students after educational records were discovered in a file cabinet at an area storage facility. The cabinet, found at the Apple Tree Auction Center, contained course registration cards containing the names and Social Security numbers of 617 students registered for classes in Fall 2010. The cabinet was accidentally sent to storage when the college moved the Student Records office. Since January 2011, the college no longer records Social Security numbers on course registration cards. According to Central Ohio Technical College spokeswoman Alice Hutzel-Bateson, the records were back in the college's possession within 24 hours. The college is offering 12 months of free credit monitoring to those affected by this accident. Students with questions are asked to contact the college's Registrar Jackie Stewart at 740-364-9599.

NUI Galway Student Information Exposed In Breach

Submitted by Adam Dodge on Thu, 2011-04-14 20:20

Quick Facts

Abstract
The National University of Ireland, Galway recently announced that a file containing personal student information was accidentally made available. The file contained the names, student ID numbers, email address, and mobile phone numbers of students from 2008. The data was exposed after a security issue with the NUI Galway Clubs and Societies computer housing the file and the university believes the file was accessed multiple times between September 2008 and December 2009. The university setup a hotline - 091 492852 - to help answer questions those affected might have.

Public Records Request Exposes Wenatchee Valley College Student Information

Submitted by Adam Dodge on Thu, 2011-03-31 05:51

Quick Facts

Abstract
Wenatchee Valley College recently contacted former students after an error processing a public records request released personal student information. In response to a request from a local law firm for 10 years of financial records, WVC forwarded 84,000 pages of information that contained the names and Social Security numbers of 3,800 students that attended the college in 2002. The error was discovered by Brent Magarrell on March 24th. Magarrell contacted WVC about the error and also filed a FERPA violation complaint with the Department of Education.

University of Kent Disability Services Email Discloses Patient Names

Submitted by Adam Dodge on Fri, 2011-03-18 05:59

Quick Facts

  • Date: 3/18/2011
  • Institution: University of Kent
  • Type of Incident: Unauthorized Disclosure
  • Number Affected: 615
  • Source: ESI
  • Abstract Source: ZDNet

Abstract
The University of Kent recently responded to a mistake that exposed the personal information of students registered with the Disability and Dyslexia Support Services at the university. The email, sent to inform students of arrangement being made for final exams, contained the names of 615 students in the CC field, exposing their names, email addresses and the fact that they receive support from Disability and Dyslexia Support Services to the other students. In a second email university officials apologized for the disclosure of protected information and had reported the incident to the Office of the Information Commissioner.

Syndicate content