Educational Security Incidents (ESI)

Quick Facts

• Date: 1/30/2009
• Institution: Kansas State University
• Type of Incident: Unauthorized Disclosure
• Number Affected: 45
• Source: ESI
• Abstract Source: TradingMarkets.com

Abstract
Kansas State University is working to notify students after it discovered personal information had been available online. The information, available online since 2001, contained in the names, grades and Social Security numbers of 45 student enrolled in the Spring 2001 AGEC 490 "Computer Applications in Agricultural Economics and Agribusiness" course. In the notification letter, K-State officials urge the affected students to take steps to protect their identities. The university has begun to take steps to prevent similar incidents from occurring in the future.

Quick Facts

• Date: 1/21/2009
• Institution: Missouri State University
• Type of Incident: Unauthorized Disclosure
• Number Affected: 565
• Source: ESI
• Abstract Source: News-Leader

Abstract
Missouri State University is working to contact foreign students after an email was accidentally sent out containing personal information. The email in question was sent out with a spreadsheet attachment containing the names and Social Security numbers and other sensitive information of 565 foreign students enrolled at MSU. The email was sent out to 179 students on January 14 by the directory of international student services. On January 16, another email was sent out asking these students to please delete the email with the attachment. MSU officials hope that the risks are lower since not all of the students had Social Security numbers. However, MSU is currently looking at the feasibility of obtaining insurance for the affected students.

Quick Facts

• Date: 1/20/2009
• Institution: University of Florida
• Type of Incident: Unauthorized Disclosure
• Number Affected: 101
• Source: ESI
• source: University of Florida Privacy Office

Abstract
The University of Florida announced that it has discovered a error in its LDAP system that potentially exposed private information. The error allowed outside access to the LDAP directory which contained Social Security numbers, used as student identifiers prior to 2003. An investigation into the error discovered the outside access was enabled an accident four months ago. The investigation did find queries that could have returned the user IDs and Social security numbers of 101 individuals. UF staff immediately remove the Social Security numbers from the LDAP directory. The University of Florida has also set up a web site - privacy.ufl.edu/incidents/2009/ldap/answers.html - with more information on the incident.

Quick Facts

• Date: 1/16/2009
• Institution: Southwestern Oregon Community College
• Type of Incident: Theft
• Number Affected: 200
• Source: DataBreaches.net
• Abstract Source: KCBY

Abstract
Southwestern Oregon Community College is alerting students after a laptop containing personal information was stolen. The laptop contained the student records of approximately 200 students. The college has also placed a privacy hold on the affected SOCC records. There is no information if the college will offer free credit monitoring to any of the affected individuals or what information was contained on the laptop.

Quick Facts

• Date: 1/13/2009
• Institution: University of Oregon
• Type of Incident: Theft
• Number Affected: Unknown
• Source: ESI
• Abstract Source: University of Oregon Media Relations

Abstract
The University of Oregon announced that an employee's laptop containing Youth Transition Program (YTP) participant information was stolen. The laptop contained the names and Social Security numbers of YTP participants from 2004 to 2007. Youth Transition Program is a program that services more then 1,200 individuals between 17 and 21 with disabilities and provides career planning and employment services. The laptop was password protected, but there was no mention of encryption. University of Oregon provides evaluation services for YTP to help determine which programs are most effective. The university sent out notification letters to affected individuals and urged these individuals to monitor their credit scores.