U. of GA Leaks Social Security Numbers

By Nate Mook | Published September 29, 2005, 12:45 PM

The University of Georgia acknowledged Wednesday that a hacker had breached the school's network and potentially accessed up to 2,429 Social Security numbers belonging to current and past faculty. Because of duplicate records, however, university officials believe the number of employees affected is smaller.

The intrusion took place on September 19 from a source outside the United States, which queried the exposed server for personal data. The university has launched an investigation and said no credit card information was contained in the database.

The school is beginning to contact those who may be at risk for identity theft via e-mail or postal mail.

"While there is no evidence that information was actually accessed, the potential exists for the intruder to match names and Social Security numbers, so it is imperative that we notify the individuals involved," said Stan Gatewood, UGA's chief information security officer, in a statement.

Georgia joins a long string of universities struggling with leaks of faculty and student data following network break-ins.

Earlier this month, the University of California, Berkeley announced it had recovered a stolen laptop containing Social Security numbers of 98,000 students and applicants, but could not say whether the data had been accessed. In March, California State University, Chico, informed students and staff that as many as 59,000 may have had their personal information accessed by an intruder.

This is not the first time the University of Georgia has faced data theft. Last year, a hacker accessed the school's network and potentially obtained credit card information on 32,000 students. Fortunately, no reports of the card numbers being misused ever cropped up.

Comments

View comments by with a score of at least

we need to start holding these guys responsible too, i'm sure there would be more care taken if so.

Score: 0

|

My god.. This isnt rocket science. How hard is it to place all these records on 1 machine and block any and all incoming traffic to it.

Dont blame the hacker, blame your Information Security department for being incompetent.

Also as far as the berkley incident. I mean how in the world did any decent IT profesional allow for 98,000 records to be copied over to a laptop without it firing a warning about such huge amount of data being copied.

Score: 0

|

"Also as far as the berkley incident. I mean how in the world did any decent IT profesional allow for 98,000 records to be copied over to a laptop without it firing a warning about such huge amount of data being copied."

If you take the time to read the linked article you will see what they meant was that a laptop (that already contained the SSNs) was stolen, and they recovered it.

Which brings up the very serious question of what in gods name were the IT staff thinking allowing that information to be placed on a laptop...

Score: 0

|

Exactly, I am an IT admin myself, and anyone in their right mind would never expose a security threat like that, its just ludicris

Score: 0

|

Whoooopsie :-O

Score: 0

|

EC's Kroes to US senators: Mind your own business on Oracle + Sun

If the AP is accurate, the EU's antitrust chief just told the United States Senate that any merger that takes place in the world is more her affair than theirs.

What does AT&T's 'Mark the Spot' app say about service quality?

That's a question for Betanews readers to answer in comments to this post.

Windows fix for TLS security bug still forthcoming, won't be Tuesday

Anyone looking for a fix for last month's discovery of a potentially serious security hole in TLS and SSL may have to wait until everyone is ready to act together.

Google rolls out real-time search, Near Me Now, extended personalization

Over time, searches from PCs and mobile phones will grow even "more personalized." But what about user privacy and search results that give you "the truth"?

Betanews Podcast: Rupert Murdoch and the buying stuff online problem

We'll have a more difficult time paying for online news if the underlying protocol for online payment has a big gaping hole in it.

Not the first, not the last, technology predictions for 2010

Carmi Levy | Wide Angle Zoom: The real truth is probably that what went around in 2009, will come around to haunt us next year.

Google Goggles: Hands on with the Shazam of the Real World

Google today unveiled Goggles, its visual search lab for Android devices that identifies objects by sight.

Microsoft: Windows 7 Family Pack wasn't 'pulled,' it just sold out

If you hurry, you may still be able to find the last Family Pack upgrade editions hanging around retail store shelves, but probably not so much online.

Clever iPhone game returns after being bumped over a name dispute

The game's simple concept and multitude of platforms and puzzles manage to pull off a retro, 8-bit style that's reminiscent of an old Atari game given a modern makeover.

Intel's marriage of CPU and GPU not ready for prime time

Although there will be an Intel component this month that can compute and plot in parallel, Betanews was told today, it won't be based on Project "Larrabee."

An alternative to Research in Motion's enterprise e-mail? There's an app for that

Good Technology today released an iPhone app compatible with its enterprise e-mail solution.