University of North Florida breach exposes data on 107,000 individuals
University networks are said to be frequently breached because they are rich targets, enrolling thousands of students a year
Computerworld - The University of North Florida has notified about 107,000 current and prospective students of the compromise of their personal information after a server containing the data was recently discovered to have been breached by unknown intruders.
Nearly 53,000 of those affected had their names and Social Security numbers compromised, while the rest had their names and dates of birth exposed in the incident.
Joanna Norris, associate director of public relations at the university, said on Friday that all of those whose data was exposed had been notified via e-mail and postal mail.
A statement released on Friday by the university noted that the intruders do not appear to have accessed student academic records or financial aid information.
However, in some cases, those behind the intrusion may have had access to ACT and SAT test scores, a separate university alert added.
The intrusion, which occurred between Sept. 24 and Sept. 29, was carried out by someone using a computer that appears to have been based outside the U.S., Norris said.
The breached computer has been secured and controls have been added to mitigate the chances of something similar happening again, Norris said.
Norris said the intrusion was discovered by university IT staff on Sept. 29 during a routine system review. She did not say what system was involved in the breach, citing the ongoing investigation, which includes the FBI.
Privacy Rights Clearinghouse, which has been maintaining a chronology of data breaches since 2005, lists nearly four dozen similar breaches at universities so far this year.
Since the beginning of 2009, there have been a total of 128 breaches at U.S academic institutions, resulting in the compromise of close to 1.7 million records, the group says.
Josh Shaul, vice president of product management at security vendor Application Security, said that higher educational institutions were hit on a regular basis because of a combination of reasons. For one, university networks are far more open and accessible by design compared with corporate environments. And schools' IT environments are also decentralized and often have multiple, independent IT groups functioning within it.
University networks are also rich targets, with schools enrolling thousands of new students every year and having many employees with access to personally identifiable information.
Cybercriminals are targeting university environments with increasing frequency "because it seems to be an easy way for them to steal data," Shaul said. "A lot of universities are bringing in security after they have been breached."
Jaikumar Vijayan covers data security and privacy issues, financial services security and e-voting for Computerworld. Follow Jaikumar on Twitter at @jaivijayan or subscribe to Jaikumar's RSS feed . His e-mail address is email@example.com.
- University of North Florida breach exposes data on 107,000 individuals
- Zeus Trojan bust reveals sophisticated 'money mules' operation in U.S.
- GAO slams White House for failing to lead on cybersecurity
- Man charged with attack on Web site of Fox News' Bill O'Reilly
- Heartland breach expenses pegged at $140M -- so far
- IT contractor gets five years for $2M credit union theft
- Democracy would suffer if Google left China, says MIT panel
- Gonzalez accomplice gets five years for hacking TJX
- Threat of cyberattacks from overseas high, federal IT execs say
- Botnets 'the Swiss Army knife of attack tools'
Read more about Cybercrime and Hacking in Computerworld's Cybercrime and Hacking Topic Center.
- Comprehensive Advanced Threat Defense The hot topic in the information security industry these days is "Advanced Threat Defense" (ATD). This paper describes a comprehensive, network-based approach to...
- Advanced Threat Defense: A Comprehensive Approach In this interview, Peter George, president, General Dynamics Fidelis Cybersecurity Solutions, explains why we need more than anti-malware, and what constitutes a comprehensive...
- 2013 Cyber Risk Report The "Cyber risk report 2013 Executive summary" presents the major findings of HP Security Research's comprehensive dive into today's cyber vulnerability and threat...
- Cybersecurity for Dummies eBook This book provides an in-depth examination of real-world attacks and APTs, the shortcomings of legacy security solutions, the capabilities of next-generation firewalls, and...
- Live Webcast Security Vulnerabilities Associated With Having Local Administrator Privileges Viewfinity will demonstrate how removing admin rights and granularly managing privileges at the application level reduces the attack surface.
- Security Vulnerabilities Associated With Having Local Administrator Privileges Viewfinity will demonstrate how removing admin rights and granularly managing privileges at the application level reduces the attack surface.
- On-demand webinar - 7 Keys to Service Catalog Implementation Success Watch this webinar to learn 7 crucial keys to make your service catalog a success! All Cybercrime and Hacking White Papers | Webcasts