Re: Internal Security Breach Costs

[George Bailey <gbailey () IVYTECH EDU>]

As reported by SANS back in August 2005:

ARRESTS, CONVICTIONS AND SENTENCES

--Former University Employees Charged in Grade-Altering Scheme

(19 August 2005)

Ellis Peet and Clifton Franklin, both former Florida Memorial University
employees, have been charged in connection with a grade-altering scheme.

The men allegedly accepted money and favors in return for changing students'
grades. Mr. Peet was a computer technician in the registrar's office and Mr.
Franklin a data entry clerk. Officials believe the pair changed their own
grades while they attended the school. According to Mr. Peet's attorney, his
client has pleaded not guilty to racketeering and violating intellectual
property and computer access laws. Mr.

Franklin faces the same charges. In addition, three of five students who
allegedly acted as middlemen in the scheme have been arrested and charged
with racketeering.

http://www.local10.com/news/4868830/detail.html
<http://www.local10.com/news/4868830/detail.html>



I am sure there are others.



--gb

----------------------
George Bailey
Information Security
Ivy Tech Community College of Indiana
Indianapolis, Indiana

PH: 317.921.4526



________________________________

From: Geoff Nathan [mailto:geoffnathan () WAYNE EDU]
Sent: Friday, November 18, 2005 2:27 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] Internal Security Breach Costs


In preparation for presenting a data custodianship policy to the
powers-that-be here at Wayne I'd like to find a couple of real-life examples
of problems caused by employee access to sensitive data (it's easy to find
reports of cases of externally hacked files).  Could anyone point me to news
reports of internal employee misuse of sensitive data at some university?
Many thanks,

Geoff Nathan

Geoffrey S. Nathan <geoffnathan () wayne edu>
Security Policy Coordinator, Computing and Information Technology,
        and Associate Professor of English
Linguistics Program                       Phone Numbers
Department of English                     Computing and Information
Technology:  (313) 577-1259
Wayne State University                    Linguistics (English):  (313)
577-8621
Detroit, MI, 48202                        C&IT Fax: (313) 577-1338