Canada: Privacy breach at MacEwan

[lyger <lyger () attrition org>]

http://www.edmontonsun.com/News/Edmonton/2007/10/04/4550530.html

A city college chose not to inform students and others whose personal 
credit information was left publicly available through its Internet site, 
it has confirmed.

MacEwan College was cited in the auditor general.s report this week after 
a tipster told the AG.s office about the security breach in 2006. It 
mirrored access problems in 2002-2003, the AG.s report confirmed.

The college chose not to tell those whose personal information was 
included in the accessible journal entries based on an assessment of risk 
by its Freedom of Information and Protection of Privacy office, said 
MacEwan spokesman Gordon Turtle.

[.]

According to the auditor general.s investigation, the breach included 
computer scans of "employee and student information such as credit card 
numbers, copies of cheques, signatures, addresses, as well as college 
information such as bank account numbers and deposit receipts."

[...]
_______________________________________________
Dataloss Mailing List (dataloss () attrition org)
http://attrition.org/dataloss

Tenable Network Security offers data leakage and compliance monitoring
solutions for large and small networks. Scan your network and monitor your
traffic to find the data needing protection before it leaks out!
http://www.tenablesecurity.com/products/compliance.shtml