UCLA data breach and CNN

["Justin Ross" <RossJ () sddpc org>]

CNN is reporting:
"The cost of notifying all the affected people runs to an estimated $10 million."
http://money.cnn.com/galleries/2007/biz2/0701/gallery.101dumbest_2007/96.html

I haven't been able to find any official documentation, or anything that references what UCLA has spent. Anyone have 
any good links or documents, that state this besides this CNN article? Any confirmation would be great. Not that I do 
not trust CNN's reporting ethics completely. /sarcasm

Thanks!

Justin.ross