BreachExchange mailing list archives

IA: UI contacts former students after laptop theft


From: lyger <lyger () attrition org>
Date: Mon, 8 Oct 2007 18:12:21 +0000 (UTC)


http://www.press-citizen.com/apps/pbcs.dll/article?AID=/20071008/NEWS01/71008002/1079

The University of Iowa is informing 184 former and current students that 
their grade information was contained on a laptop computer stolen from a 
former teaching assistant now living in Arizona.

The theft of the computer, which occurred last month in a break-in of the 
instructor's home, contained class records such as attendance, test 
scores, and grades of students who took his philosophy courses at the UI 
between 2002 and 2006. Social security numbers (SSNs) were also present in 
100 of the records.

UI Information Technology Security Officer Jane Drews analyzed backup 
copies of the files and found them an unlikely source for committing 
identity theft. "The instructor buried the files in his directory 
structure and obfuscated the social security numbers," Drews said. "While 
they were not encrypted, popular SSN scanning tools were unable to detect 
SSNs in any of the five files."

[...]
_______________________________________________
Dataloss Mailing List (dataloss () attrition org)
http://attrition.org/dataloss

Tenable Network Security offers data leakage and compliance monitoring
solutions for large and small networks. Scan your network and monitor your
traffic to find the data needing protection before it leaks out!
http://www.tenablesecurity.com/products/compliance.shtml


Current thread: