IT Security & Network Security News & Reviews: Major Universities Rank High in 'Sweet Sixteen' Data Breaches of 2010

 
 
By Fahmida Y. Rashid  |  Posted 2011-04-01
 
 
 

Ohio State University

Date: Dec. 15, 2010 Number of compromised records: 750,000Unauthorized individuals logged into an OSU server and had access to names, Social Security numbers, dates of birth and addresses of current and former students, faculty, staff, consultants and contractors.

Ohio State University

Valdosta State University

Date: Dec. 15, 2010 Number of compromised records: 170,000A Valdosta State server was breached around Nov. 11 and exposed grades and Social Security numbers of up to 170,000 students and faculty.

Valdosta State University

University of North Florida

Date: Oct. 15, 2010 Number of compromised records: 106,884A hacker from outside of the country accessed application information and may have obtained names, ACT and SAT standardized test scores, dates of birth, and Social Security numbers. While 106,884 records were compromised in total, the university said 52,853 records actually contained personal identifying information.

University of North Florida

Buena Vista University

Date: July 16, 2010 Number of compromised records: 93,000An unauthorized intruder got into a BVU database containing names, Social Security numbers and drivers' license numbers of anyone who'd ever applied to BVU as well as current and former students, parents, current and former faculty, staff, alumni, and donors since 1987.

Buena Vista University

University of Missouri System

Date: Jan. 21, 2010Number of compromised records: 75,000When the university mailed out IRS form 1098-T to students with information about tuition billed and paid, some of the letters were folded in a way that the Social Security number was visible through the envelope's clear address window.

University of Missouri System

Stony Brook University

Date: Dec. 19, 2010 Number of compromised records: 61,001A PDF or Excel file containing student and faculty network IDs were available for download from a publicly accessible Website. A flaw allowed a student to change students' passwords without knowing the original one and then posted the list online.

Stony Brook University

University of Wisconsin - Madison

Date: Dec. 10, 2010 Number of compromised records: 60,000Hackers broke in and stole files containing photo IDs of former students enrolled prior to 2008. The images had student Social Security numbers embedded along with student names.

University of Wisconsin - Madison

University of Hawaii

Date: July 7, 2010Number of compromised records: 53,000More than 40,000 Social Security numbers and 200 credit card numbers were exposed when the computer served by the campus parking office was breached.

University of Hawaii

Messiah College

Date: Nov. 16, 2010 Number of compromised records: 43,000An external hard drive belonging to the financial aid department containing information on current, former and prospective students and their parents was lost or stolen. The hard drive contained names, Social Security numbers, dates of birth and transcripts and spanned from 1994 to 2010. Luckily, the drive was later recovered, and it is unlikely that anyone accessed the information while it was missing.

Messiah College

Pennsylvania State University

Date: June 3, 2010Number of compromised records: 40,806A server belonging to Penn State's Outreach Market Research and Data office was communicating with a botnet C&C. The database on the server contained Social Security numbers and other personal information.

Pennsylvania State University

University of Hawaii - West Oahu

Date: Oct. 29, 2010Number of compromised records: 40,101Unencrypted files on the faculty Web server contained student names, Social Security numbers, birth dates, addresses and academic information of former students from 1988 to 1994.

University of Hawaii - West Oahu

Oregon State University

Date: July 14, 2010Number of compromised records: 34,000A virus infected a computer containing personal information and Social Security numbers of current and former employees from 1999 to 2005.

Oregon State University

University of Texas - Arlington

Date: July 24, 2010Number of compromised records: 27,000There were four separate attacks on a file server containing student health center prescription records from 2000 to June 21, 2010. Of the compromised records, 2,048 had personal identifying information included.

University of Texas - Arlington

Thomas Jefferson University Hospitals

Date: July 23, 2010Number of compromised records: 21,000A password-protected laptop containing protected health records, health insurance data and personal health information was stolen.

Thomas Jefferson University Hospitals

Florida International University

Date: June 23, 2010Number of compromised records: 19,495Personal data was exposed over the Internet via a database's search function, including grades and Social Security numbers.

Florida International University

University of Texas - El Paso

Date: Feb. 6, 2010Number of compromised records: 15,000When the university mailed out tax forms to students, some of the letters were folded in a way that the Social Security number was visible through the envelope's clear address window.

University of Texas - El Paso

The Brackets

TeamShatter analyzed 57 higher education breaches reported in 2010 and came up with a March Madness-style bracket to visually represent schools that have somehow compromised personal information belonging to student, faculty and staff.

The Brackets

Rocket Fuel