Educause Security Discussion mailing list archives
Re: Internal Security Breach Costs
From: William Moore <wcmoore () VALDOSTA EDU>
Date: Mon, 21 Nov 2005 20:43:49 -0500
I think this is an updated link to the article in question. "Two FMU employees accused of changing gradesFive former students and two workers at Florida Memorial University were charged with racketeering in a grade-fixing scheme involving 122 students. The full article will be available on the Web for a limited time: http://www.miami.com/mld/miamiherald/12412205.htm (c) 2005 Herald.com and wire service sources. All Rights Reserved." William C. Moore II, CISSP, MLIS Chief Information Security Officer Information Technology Valdosta State University Valdosta, GA 31698 Phone:(229)333-5974 Fax: (229)245-4349 *********************************************************************** The information transmitted is intended only for the person addressed. Any unauthorized review, distribution or other use of or the taking of any action in reliance upon this information is prohibited. If you received this message in error, please contact the sender and delete or destroy this message and any copies. *********************************************************************** ----- Original Message ----- From: George Bailey <gbailey () ivytech edu> Date: Friday, November 18, 2005 2:37 pm Subject: Re: [SECURITY] Internal Security Breach Costs
As reported by SANS back in August 2005: ARRESTS, CONVICTIONS AND SENTENCES --Former University Employees Charged in Grade-Altering Scheme (19 August 2005) Ellis Peet and Clifton Franklin, both former Florida Memorial Universityemployees, have been charged in connection with a grade- altering scheme. The men allegedly accepted money and favors in return for changing students'grades. Mr. Peet was a computer technician in the registrar's office and Mr. Franklin a data entry clerk. Officials believe the pair changed their own grades while they attended the school. According to Mr. Peet's attorney, his client has pleaded not guilty to racketeering and violating intellectualproperty and computer access laws. Mr. Franklin faces the same charges. In addition, three of five students who allegedly acted as middlemen in the scheme have been arrested and chargedwith racketeering. http://www.local10.com/news/4868830/detail.html <http://www.local10.com/news/4868830/detail.html> I am sure there are others. --gb ---------------------- George Bailey Information Security Ivy Tech Community College of Indiana Indianapolis, Indiana PH: 317.921.4526 ________________________________ From: Geoff Nathan [mailto:geoffnathan () WAYNE EDU] Sent: Friday, November 18, 2005 2:27 PM To: SECURITY () LISTSERV EDUCAUSE EDU Subject: [SECURITY] Internal Security Breach Costs In preparation for presenting a data custodianship policy to the powers-that-be here at Wayne I'd like to find a couple of real- life examples of problems caused by employee access to sensitive data (it's easy to find reports of cases of externally hacked files). Could anyone point me to news reports of internal employee misuse of sensitive data at some university?Many thanks, Geoff Nathan Geoffrey S. Nathan <geoffnathan () wayne edu> Security Policy Coordinator, Computing and Information Technology, and Associate Professor of English Linguistics Program Phone Numbers Department of English Computing and Information Technology: (313) 577-1259 Wayne State University Linguistics (English): (313)577-8621 Detroit, MI, 48202 C&IT Fax: (313) 577-1338
Current thread:
- Internal Security Breach Costs Geoff Nathan (Nov 18)
- <Possible follow-ups>
- Re: Internal Security Breach Costs George Bailey (Nov 18)
- Re: Internal Security Breach Costs Richard Gambrell (Nov 19)
- Re: Internal Security Breach Costs Youngquist, Jason R. (Nov 21)
- Re: Internal Security Breach Costs William Moore (Nov 21)
- Re: Internal Security Breach Costs Jack Suess (Nov 22)