BreachExchange mailing list archives

Oops! 'Private' UGA Data Went Public [University of Georgia]


From: Jeffrey Walton <noloader () gmail com>
Date: Fri, 7 Oct 2011 18:48:27 -0400

http://athens.patch.com/articles/oops-uga-has-security-breach

If you worked at the university in 2002, your private information may
have been made public.

According to a statement from UGA spokesman Tom Jackson, university
officials recently discovered a data file on a publicly available web
server. The file contained sensitive information, including Social
Security numbers, on 18,931 faculty and staff members who were working
at UGA in 2002....

Someone had created the file for legitimate administrative purposes.
It was accessible on the web from 2008 to 2011, and possibly dating
back to 2002. Included on it were the Social Security number, name,
date of birth, date of employment, sex, race, home phone number and
home address of individuals employed at UGA in 2002.
_______________________________________________
Dataloss Mailing List (dataloss () datalossdb org)
Archived at http://seclists.org/dataloss/
Unsubscribe at http://datalossdb.org/mailing_list

Learn encryption strategies that manage risk and shore up compliance.
Download Article 1 of CREDANT Technologies' The Essentials Series:
Endpoint Data Encryption That Actually Works
http://credant.com/campaigns/realtime2/gap-LP1/


Current thread: