Educause Security Discussion mailing list archives

Re: Recommend changing students ID numbers?


From: Brad Judy <brad.judy () CU EDU>
Date: Fri, 13 Sep 2019 15:05:14 +0000

That question begs another question in response:

What does just a student ID number get you at your institution? What is the risk to the students? The statement that it 
isn’t confidential and is printed on ID cards indicates that the number is (hopefully) not being used for something 
like identity validation at your institution. I’d say that if exposing the ID number poses a risk to your students, 
then you have a bigger problem printing it on everyone’s ID cards.

Brad Judy

Information Security Officer
Office of Information Security
University of Colorado
1800 Grant Street, Suite 300
Denver, CO  80203
Office: (303) 860-4293
Fax: (303) 860-4302
www.cu.edu<http://www.cu.edu/>

[cu-logo_fl]


From: EDUCAUSE Listserv <SECURITY () LISTSERV EDUCAUSE EDU> on behalf of Jared Evans <jared.evans () GALLAUDET EDU>
Reply-To: EDUCAUSE Listserv <SECURITY () LISTSERV EDUCAUSE EDU>
Date: Thursday, September 12, 2019 at 8:32 AM
To: EDUCAUSE Listserv <SECURITY () LISTSERV EDUCAUSE EDU>
Subject: [SECURITY] Recommend changing students ID numbers?

I would like to poll the other officers on this list and see if the below scenario warrants changing the student ID 
numbers:

A file containing a list of new incoming students' names, email addresses, and their student ID numbers was recently, 
by accident, emailed to all the residents of a dorm building.

The student ID numbers can be seen on the student cards.  The above information isn't confidential, but with student ID 
numbers aggregated together, would not be ideal.

Does this event warrant making the suggestion that all the students mentioned in the file should have their student ID 
number changed?

--
[Image removed by sender.]
Jared Evans
Information Security Officer
Gallaudet Technology Services
Gallaudet University
jared.evans () gallaudet edu<mailto:jared.evans () gallaudet edu>

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community

**********
Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the 
person who sent the message, copy and paste their email address and forward the email reply. Additional participation 
and subscription information can be found at https://www.educause.edu/community


Current thread: