Educause Security Discussion mailing list archives

Re: Internal Security Breach Costs


From: William Moore <wcmoore () VALDOSTA EDU>
Date: Mon, 21 Nov 2005 20:43:49 -0500

I think this is an updated link to the article in question.

"Two FMU employees accused of changing gradesFive former students and
two workers at Florida Memorial University were charged with
racketeering in a grade-fixing scheme involving 122 students.
The full article will be available on the Web for a limited time:
http://www.miami.com/mld/miamiherald/12412205.htm
(c) 2005 Herald.com and wire service sources. All Rights Reserved."







William C. Moore II, CISSP, MLIS
Chief Information Security Officer
Information Technology
Valdosta State University
Valdosta, GA 31698
Phone:(229)333-5974
Fax:  (229)245-4349



***********************************************************************
The information transmitted is intended only for the person addressed.
Any unauthorized review, distribution or other use of or the taking of
any action in reliance upon this information is prohibited. If you
received this message in error, please contact the sender and delete or
destroy this message and any copies.
***********************************************************************


----- Original Message -----
From: George Bailey <gbailey () ivytech edu>
Date: Friday, November 18, 2005 2:37 pm
Subject: Re: [SECURITY] Internal Security Breach Costs

As reported by SANS back in August 2005:

ARRESTS, CONVICTIONS AND SENTENCES

--Former University Employees Charged in Grade-Altering Scheme

(19 August 2005)

Ellis Peet and Clifton Franklin, both former Florida Memorial
Universityemployees, have been charged in connection with a grade-
altering scheme.

The men allegedly accepted money and favors in return for changing
students'grades. Mr. Peet was a computer technician in the
registrar's office and Mr.
Franklin a data entry clerk. Officials believe the pair changed
their own
grades while they attended the school. According to Mr. Peet's
attorney, his
client has pleaded not guilty to racketeering and violating
intellectualproperty and computer access laws. Mr.

Franklin faces the same charges. In addition, three of five
students who
allegedly acted as middlemen in the scheme have been arrested and
chargedwith racketeering.

http://www.local10.com/news/4868830/detail.html
<http://www.local10.com/news/4868830/detail.html>



I am sure there are others.



--gb

----------------------
George Bailey
Information Security
Ivy Tech Community College of Indiana
Indianapolis, Indiana

PH: 317.921.4526



________________________________

From: Geoff Nathan [mailto:geoffnathan () WAYNE EDU]
Sent: Friday, November 18, 2005 2:27 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] Internal Security Breach Costs


In preparation for presenting a data custodianship policy to the
powers-that-be here at Wayne I'd like to find a couple of real-
life examples
of problems caused by employee access to sensitive data (it's easy
to find
reports of cases of externally hacked files).  Could anyone point
me to news
reports of internal employee misuse of sensitive data at some
university?Many thanks,

Geoff Nathan

Geoffrey S. Nathan <geoffnathan () wayne edu>
Security Policy Coordinator, Computing and Information Technology,
       and Associate Professor of English
Linguistics Program                       Phone Numbers
Department of English                     Computing and Information
Technology:  (313) 577-1259
Wayne State University                    Linguistics (English):
(313)577-8621
Detroit, MI, 48202                        C&IT Fax: (313) 577-1338


Current thread: