Quick Facts

• Date: 6/8/2010
• Institution: Tufts University
• Type of Incident: Penetration
• Number Affected: 7,000
• Source: ESI, DataBreaches.net(Update1)
• Abstract Source: Blast Magazine
• Update1 Source: New Hampshire Attorney General's Office (PDF)

Abstract
Tufts University recently announced that a virus infection found on several computers could have exposed alumni information. The computers, which were compromised with viruses that could have allowed unauthorized access, contained that names and Social Security numbers of 7,000 alumni. While Tufts does not have any evidence that the files were accessed or downloaded, the university is offering one year of credit monitoring to those affected. Tufts spokesperson Kimberly Thurler stated incident only affected an small number of isolated computers.

Update1
According to the notification sent to the New Hampshire Attorney General's Office, Tufts first noticed that the "torpig" virus was affected two computers on February 18, 2009. Addition infections were detected on March 9, March 16 and April 2. According to the letter, the computers were infected after users visited web sites hosting malicious advertisements. To assist with the investigation Tufts contract with cmd Labs of Baltimore, MD.