IT Security & Network Security News & Reviews: Major Universities Rank High in 'Sweet Sixteen' Data Breaches of 2010
Ohio State University
Date: Dec. 15, 2010 Number of compromised records: 750,000Unauthorized individuals logged into an OSU server and had access to names, Social Security numbers, dates of birth and addresses of current and former students, faculty, staff, consultants and contractors.
Valdosta State University
Date: Dec. 15, 2010 Number of compromised records: 170,000A Valdosta State server was breached around Nov. 11 and exposed grades and Social Security numbers of up to 170,000 students and faculty.
University of North Florida
Date: Oct. 15, 2010 Number of compromised records: 106,884A hacker from outside of the country accessed application information and may have obtained names, ACT and SAT standardized test scores, dates of birth, and Social Security numbers. While 106,884 records were compromised in total, the university said 52,853 records actually contained personal identifying information.
Buena Vista University
Date: July 16, 2010 Number of compromised records: 93,000An unauthorized intruder got into a BVU database containing names, Social Security numbers and drivers' license numbers of anyone who'd ever applied to BVU as well as current and former students, parents, current and former faculty, staff, alumni, and donors since 1987.
University of Missouri System
Date: Jan. 21, 2010Number of compromised records: 75,000When the university mailed out IRS form 1098-T to students with information about tuition billed and paid, some of the letters were folded in a way that the Social Security number was visible through the envelope's clear address window.
Stony Brook University
Date: Dec. 19, 2010 Number of compromised records: 61,001A PDF or Excel file containing student and faculty network IDs were available for download from a publicly accessible Website. A flaw allowed a student to change students' passwords without knowing the original one and then posted the list online.
University of Wisconsin - Madison
Date: Dec. 10, 2010 Number of compromised records: 60,000Hackers broke in and stole files containing photo IDs of former students enrolled prior to 2008. The images had student Social Security numbers embedded along with student names.
University of Hawaii
Date: July 7, 2010Number of compromised records: 53,000More than 40,000 Social Security numbers and 200 credit card numbers were exposed when the computer served by the campus parking office was breached.
Date: Nov. 16, 2010 Number of compromised records: 43,000An external hard drive belonging to the financial aid department containing information on current, former and prospective students and their parents was lost or stolen. The hard drive contained names, Social Security numbers, dates of birth and transcripts and spanned from 1994 to 2010. Luckily, the drive was later recovered, and it is unlikely that anyone accessed the information while it was missing.
Pennsylvania State University
Date: June 3, 2010Number of compromised records: 40,806A server belonging to Penn State's Outreach Market Research and Data office was communicating with a botnet C&C. The database on the server contained Social Security numbers and other personal information.
University of Hawaii - West Oahu
Date: Oct. 29, 2010Number of compromised records: 40,101Unencrypted files on the faculty Web server contained student names, Social Security numbers, birth dates, addresses and academic information of former students from 1988 to 1994.
Oregon State University
Date: July 14, 2010Number of compromised records: 34,000A virus infected a computer containing personal information and Social Security numbers of current and former employees from 1999 to 2005.
University of Texas - Arlington
Date: July 24, 2010Number of compromised records: 27,000There were four separate attacks on a file server containing student health center prescription records from 2000 to June 21, 2010. Of the compromised records, 2,048 had personal identifying information included.
Thomas Jefferson University Hospitals
Date: July 23, 2010Number of compromised records: 21,000A password-protected laptop containing protected health records, health insurance data and personal health information was stolen.
Florida International University
Date: June 23, 2010Number of compromised records: 19,495Personal data was exposed over the Internet via a database's search function, including grades and Social Security numbers.
University of Texas - El Paso
Date: Feb. 6, 2010Number of compromised records: 15,000When the university mailed out tax forms to students, some of the letters were folded in a way that the Social Security number was visible through the envelope's clear address window.
TeamShatter analyzed 57 higher education breaches reported in 2010 and came up with a March Madness-style bracket to visually represent schools that have somehow compromised personal information belonging to student, faculty and staff.