tower

UT Tyler Information For:

 

 

Search UT Tyler

 

 
 

Information Systems and Communications

University Data Breaches (2000 - Present)

Summary of Incidences

Number Incident Type
106 Hacking 
45 Exposed online 
33 Stolen Laptops 
16 Stolen Computers
22 Other 
9 Erroneous Email 
3 Dishonest insider 
4 Malware/Virus 
14 Theft of Media
1 Lost PDA 
253 Total

** UT System Component Data Loss appears in Orange **

Date University/Link to Information Incident Details Number Affected
 

 

 Total Number of people affected by these incidents 5,989,105
03/28/08

Antioch University

http://attrition.org/dataloss/2008/03/antioch01.html

Hacking; Antioch University says one of its computer systems that contained personal information on about 70,000 people was breached by an unauthorized intruder three times last year.

70000
03/23/08

Western Carolina University

http://attrition.org/dataloss/2008/03/wcu01.html

Hacking; Someone had hacked into a computer and had access to the Social Security numbers of 555 graduates of Western Carolina University who had signed up for a newsletter.

555
03/20/08

Lassell College

http://attrition.org/dataloss/2008/03/lasell01.html

Hacking; Lasell College says a hacker accessed data containing personal information on about 20,000 current and former students, faculty, staff and alumni.

20000
03/17/08

Binghamton University

http://attrition.org/dataloss/2008/03/bu01.html

 Erroneous Email; The Social Security numbers of more than 300 Binghamton University students were accidentally e-mailed to a list of hundreds of other students on Friday. 300
03/12/08

Harvard University

http://attrition.org/dataloss/2008/03/harvard01.html

Hacking; Last month's hack of a Harvard Graduate School of Arts and Sciences (GSAS) Web server may have compromised 10,000 sets of personal information from applicants and students, including 6,600 Social Security numbers and 500 Harvard ID numbers, the University said today.

10000
02/16/08

Texas A&M University

http://attrition.org/dataloss/2008/02/texasam01.html

Exposed Online;A computer file containing the names and Social Security numbers of 3,000 current and former Texas A&M University agricultural employees was inadvertently posted online and accessible to the public for three weeks. 3000
02/13/08

Middle Tennessee State University

http://attrition.org/dataloss/2008/02/mtsu01.html

 Hacking; MTSU officials said today an unknown person accessed a computer containing the names and Social Security numbers of about 1,500 past and current students. 1500
02/12/08

Long Island University

http://attrition.org/dataloss/2008/02/liu01.html

Other; Long Island University has sent letters to 25,000 to 30,000 students informing them that tax forms mailed to them last week in "defective mailers" might have led to identity theft, and recommended that students put fraud alerts on their credit files.

30000
01/31/08

University of Minnesota Reproductive Medicine Center

http://attrition.org/dataloss/2008/01/umrmc01.html

Theft/Loss of Media; A lost flash drive used as a backup was lost.  The drive holds details of infertility treatments for 3,100 patients going back to 1999. 3100
01/29/08

Georgetown University

http://attrition.org/dataloss/2008/01/gtown01.html

Theft/Loss of Media; A hard drive containing the Social Security numbers of nearly 40,000 Georgetown students, alumni, faculty and staff was reported stolen from the office of Student Affairs on Jan. 3, potentially exposing thousands of students to identity theft. 38000
01/25/08

Penn State University

http://attrition.org/dataloss/2008/01/psu01.html

Stolen Laptop;

A university laptop containing archived information and social security numbers for 677 students attending Penn State between 1999 and 2004 was recently stolen from a faculty member while traveling earlier this month.

677
01/16/08

University of Wisconsin, Madison

http://attrition.org/dataloss/2008/01/uwismad01.html

Exposed Online; The personal information -- including e-mail addresses, phone numbers and Social Security-based campus ID numbers of faculty and staff who made purchases from the DoIT computer shop -- had been accessible on a campus Internet site for at least a year. 205
01/14/08

Tennessee Tech University

http://attrition.org/dataloss/2008/01/ttu01.html

Theft/Loss of Media; A portable storage drive containing the names and Social Security numbers of 990 Tennessee Tech University students has been lost, according to university officials.

990
01/12/08

California State University, Stanislaus

http://attrition.org/dataloss/2008/01/csus01.html

Other; Some people using a bank or credit card at California State University, Stanislaus, dining facilities within the past six months appear to have had their personal information stolen.

Unknown
01/11/08

University of  Iowa

http://attrition.org/dataloss/2008/01/uiowa01.html

Exposed Online; The University of Iowa College of Engineering has notified some 216 of its former students that some of their personal information, including Social Security numbers, was inadvertently exposed on the Internet for several months, until the erroneous file location was discovered in early January 2008. The information did not include birth dates, specific grades, or any financial information, such as credit card numbers.

216
01/11/08

University of Akron

http://attrition.org/dataloss/2008/01/akron01.html

Theft/Loss of Media;The University of Akron has informed 800 students and graduates of the College of Education that a portable hard drive containing personal information is missing and may have been discarded or destroyed in December. 800
01/08/08

University of Georgia

http://attrition.org/dataloss/2008/01/uga01.html

Hacking; University of Georgia officials are trying to contact more than 4,000 current, former and perspective residents of a university housing complex after a hacker was able to access a server containing personal information, including Social Security numbers.

4250
01/05/08

New Mexico State University

http://attrition.org/dataloss/2008/01/nmsu01.html

Theft/Loss of Media; A computer hard drive containing the names and Social Security numbers of current and former NMSU employees is missing from the Pan American Center, just the latest in a series of thefts from the facility since November 2006, according to police reports.

Unknown
12/04/07

Duke University

http://attrition.org/dataloss/2007/12/duke01.html

Hacking; Duke University officials say the Social Security numbers of about 1,400 prospective law school applicants may have been compromised when a school Web site was accessed illegally.

1400
11/21/07

University of Florida

http://attrition.org/dataloss/2007/11/uf01.html

Exposed Online; More than 400 former UF students might have been put at risk for identity theft after their Social Security numbers were posted on UF's Computing & Networking Services Web site. 415
11/16/08

Kansas State University

http://attrition.org/dataloss/2007/11/ksu01.html

Exposed Online; K-State's Office of International Programs and International Student Center are notifying 128 international students that their Social Security numbers were exposed through a K-State Web site. 128
11/02/07

Montana State University

http://attrition.org/dataloss/2007/11/msu01.html

 Exposed Online; Nov. 2, an independent security analyst informed university data security staff that an Excel spreadsheet with the names and Social Security numbers of 42 people - mostly new hires during the summer of 2006 - was available on the MSU Web site. The spreadsheet was immediately removed. 42
11/02/07

Montana State University

http://attrition.org/dataloss/2007/11/msu01.html

Theft/Loss of Media; On Nov. 2, it was determined that a stolen data storage device contained the Social Security numbers of 216 students and employees who lived in on-campus housing from 1998 to the spring of 2007.

216
11/01/07

City University of New York

http://attrition.org/dataloss/2007/11/cuny01.html

Stolen Laptop;CUNY officials are urging students to double check their bank accounts, after a broken laptop containing personal information was taken from the school's financial aid office.

20000
10/30/07

University of Nevada, Reno

http://attrition.org/dataloss/2007/10/unr01.html

Theft/Loss of Media;A University of Nevada, Reno professor has lost a flash drive that contained the names and Social Security numbers of 16,000 current and former students.

16000
10/25/07

University of Akron

http://attrition.org/dataloss/2007/10/akron01.html

Theft/Loss of Media; A microfilm containing the personal information of approximately 1,200 University of Akron alumni is missing. 1200
10/23/07

Bates College

http://attrition.org/dataloss/2007/10/bates01.html

Other; Two publicly accessible documents that contained the record of nearly 500 recipients of the federal Perkins Loan along with each recipient's address, date of birth, Social Security number, legal name and loan amount were uncovered on the Bates network by The Bates Student on Oct. 13. All that was necessary to access the files was a Bates username and password.

500
10/23/07

Dixie State College

http://attrition.org/dataloss/2007/10/dixie01.html

Other; An unauthorized person reportedly gained access to Dixie State College's computer system and gained access to confidential files, including Social Security numbers, birth date information and addresses for some alumni and current DSC employees. 11000
10/18/07

University of Cincinnati

http://attrition.org/dataloss/2007/10/uc01.html

 Theft/Loss of Media; A flash drive was taken from a U.C. Employee last month. It had the Social Security numbers and other data for more than 7,000 people. 7000
10/13/07

Montana State University

http://attrition.org/dataloss/2007/10/msu01.html

Hacking; Montana State University security experts have determined that an unknown hacker remotely accessed a computer server that housed records containing credit card numbers and social security numbers of students who enrolled online for MSU Extended University courses during the last two years.

1400
10/08/07

Carnegie Mellon University

http://attrition.org/dataloss/2007/10/cmu01.html

Stolen Laptops; According to University Police reports filed on Sept. 2, the laptops were stolen from the office of a computer science professor;  The laptops were not encrypted Unknown
10/08/07

University of Iowa

http://attrition.org/dataloss/2007/10/uiowa01.html

Stolen Laptops; The University of Iowa is informing 184 former and current students that their grade information was contained on a laptop computer stolen from a former teaching assistant now living in Arizona. 184
10/04/07

MacEwan College

http://attrition.org/dataloss/2007/10/macewan01.html

Other; The college chose not to inform students and others whose personal credit information was left publicly available through its Internet site, it has confirmed. Unknown
09/19/07

University of Michigan

http://attrition.org/dataloss/2007/09/umich01.html

Other; 8,585 tapes were stolen from the School of Nursing. The tapes were used as backups for the school's computer database. They contained patient information like social security numbers and patient names and addresses. Unknown
09/14/07

Tennessee Tech University

http://attrition.org/dataloss/2007/09/ttu01.html

 Erroneous email; A technical problem in the way student bills are printed resulted in the chance that some student social security numbers and personal identification numbers may have been sent to another student's address. 3100
09/10/07

Purdue University

http://attrition.org/dataloss/2007/09/purdue01.html

 Exposed Online; Information about students was inadvertently posted on the Internet.

The information was in a document that contained the names and Social Security numbers of students in the Animal Sciences 102 class. The page was no longer in use but was on a computer server connected to the Internet. The document was found recently through an internal search and reported to the chief information security officer at Purdue.

111
09/06/07

De Anza College

http://attrition.org/dataloss/2007/09/deanza01.html

Stolen Laptop; Former students might be at risk for identity fraud after an instructor's laptop computer, containing students' personal information, was stolen last month. 4375
09/06/07

University of South Carolina

http://attrition.org/dataloss/2007/09/usc01.html

 Exposed Online; Student files that contained SSNs were found on the internet; 1482
08/10/07

Loyola University

http://attrition.org/dataloss/2007/08/loyola01.html

Other; A Loyola University computer with the Social Security numbers of 58 hundred students was discarded before its hard drive was erased, forcing the school to warn students about potential identify theft. 5800
08/08/07

Yale University

http://attrition.org/dataloss/2007/08/yale01.html

 Stolen Computer; Social Security numbers for over 10,000 current and former students, faculty and staff were compromised last month following the theft of two University computers ; 10200
08/02/07

University of Toledo

http://attrition.org/dataloss/2007/08/uotol01.html

Stolen Computer;   2 stolen hard drives, which are believed to have contained some names, Social Security numbers, and grade changes, were taken from UT’s department of health and rehabilitative services Unknown
07/21/07

University of Michigan

http://attrition.org/dataloss/2007/07/umich01.html

Hacking; A hacker gained access to personal information on two School of Education databases containing SSNs 5500
07/18/07

Purdue University

http://news.uns.purdue.edu/coe0706.html

Exposed online; Files which were no longer in use were discovered on a computer server connected to the Internet. The files contained names and Social Security numbers of students who were enrolled in an industrial engineering course 50
07/15/07

Westminster College

 Exposed online; Names of students, former and current were printed in two files along with each student's Social Security number. The files were on a student Web server used by Westminster students 100
06/27/07

University of California, Davis

http://attrition.org/dataloss/2007/06/ucd01.html

Hacking; A criminal investigation into the apparent hacking and misuse of computerized veterinary medical school admissions records; the university determined that its computer-security safeguards had been breached and someone had gained access to the personal information of an estimated 1,120 applicants to the School of Veterinary Medicine for the 2007-2008 school year, including 131 accepted students. The hacker had accessed information including the applicants' names, birth dates and, in most cases, Social Security numbers. 1120
06/27/07

Bowling Green State University

http://attrition.org/dataloss/2007/06/bgsu01.html

 Theft/Loss of media; A computer flash drive with information about them has been lost. Files on the portable storage device contained Social Security numbers for 199 students from his classes in 1992, and the names, grades and University identification numbers but not the Social Security numbers for approximately 1,600 other students. 199
06/18/17

Texas A&M Corpus Christi

http://attrition.org/dataloss/2007/06/tamcc01.html

 Theft/Loss of media; The personal information of thousands of students at Texas A&M Corpus Christi was recently lost in a foreign country. A professor vacationing off the coast of Africa took the data with him on a small computer storage device. University officials said he took with him a flash drive, containing the personal data of some 8,000 students to do some work while on vacation, but this week, the school is telling students that the flash drive was lost in Madascar, and officials said the device, "may have contained files with personally identifiable student information, including social security numbers." 8000
06/14/07

Georgia Tech University

http://attrition.org/dataloss/2007/06/gatech01.html

 Exposed Online; An electronic file containing the personal information of about 23,000 current and former Georgia Tech students was exposed briefly; The information was mostly demographic data and included no Social Security numbers or credit card numbers, but it did include birthdays 23000
06/11/07

Grand Valley State University

http://attrition.org/dataloss/2007/06/gvsu01.html

Theft/Loss of Media; A flash drive containing some confidential information was stolen from Lake Huron Hall on Grand Valley State University's Allendale Campus; About 3,000 social security numbers of current and former students were on the flash drive, stolen from the English department. 3000
06/08/07

University of Iowa

http://attrition.org/dataloss/2007/06/uiowa01.html

Hacking; Students and faculty associated with a University of Iowa graduate program are being notified this week about a Web-site security breach. UI has sent letters to about 1,000 current students and applicants to the Molecular and Cellular Biology program and to 100 faculty members 1100
06/08/07

University of Virginia

http://attrition.org/dataloss/2007/06/uva01.html

 Hacking; The University of Virginia has discovered a security breach in one of its computer applications that resulted in exposure of sensitive information belonging to current and former U.Va. faculty members. The information included names, Social Security numbers and dates of birth. 5735
06/01/07

Northwestern University

http://attrition.org/dataloss/2007/06/nu01.html

Exposed Online; Personal information of 4000 students and applicants was stored on a computer at the Integrated Graduate Program in the Life Sciences dept and had become available online; 4000
05/22/07

University of Colorado at Boulder

http://attrition.org/dataloss/2007/05/cub01.html

 Malware/Virus; A computer worm attacked a computer server used by the College of Arts and Sciences. The hacker was then able to have access to the vital information for 45,000 students who were enrolled at CU Boulder from 2002 to the present. 45000
05/22/07

University of Pittsburgh Medical Center

http://attrition.org/dataloss/2007/05/uopmc01.html

Other; The incident involves donor solicitation letters the medical center mailed to about 6,000 former patients; The mailing included donor response cards, most of which "inadvertently" contained a tracking code that included the recipient's Social Security number visible through the envelope window 6000
05/20/07

Northwestern University

http://attrition.org/dataloss/2007/05/nu01.html

Stolen Laptop; A laptop computer belonging to Northwestern University's financial aid office in Chicago recently was stolen, and the Social Security numbers of some alumni may have been compromised, school officials said.

Unknown
05/19/07

Stony Brook College

http://attrition.org/dataloss/2007/05/stony01.html

Exposed Online; Social Security numbers and university ID numbers of faculty, staff, students, alumni, and other members of the community were visible on Google after they were posted to a Health Sciences Library web server 99000
05/14/07

Community College of Southern Nevada

http://attrition.org/dataloss/2007/05/ccsn01.html

Malware/Virus; A virus found on a server that stores student information may have put student information at risk; 197000
05/12/07

Goshen College

http://attrition.org/dataloss/2007/05/goshen01.html

Hacking; From May 5 to 7, a Goshen College computer was remotely accessed by a "hacker" with the suspected motivation of using the system to send spam e-mails;

 7300
05/08/07

University of Missouri

http://attrition.org/dataloss/2007/05/mu02.html

 Hacking; A recent attack on the University of Missouri system computer database allowed an unknown hacker, or several hackers, to retrieve 22,396 names and Social Security numbers of individuals associated with the university;

The hacker accessed the information through a Web page used to make queries about the status of trouble reports to the information technology help desk, based in Columbia.

22396
05/03/07

Louisiana State University

http://attrition.org/dataloss/2007/05/lsu01.html

 Stolen Laptop; An Information Technology investigation has revealed that a laptop stolen from a faculty member's Baton Rouge home may contain personally identifiable information for about 750 University students. 750
05/03/07

Montgomery College

http://attrition.org/dataloss/2007/05/montgom01.html

 Other; The discovery was made by students at the campus just outside of Conroe. Students found a list of all graduating seniors on a computer drive that is publicly accessible on all campus computers.

On that list of names was also personal and sensitive information, including social security numbers and addresses.

Unknown
04/29/07

University of New Mexico

http://attrition.org/dataloss/2007/04/unm02.html

 Stolen Laptop; University of New Mexico officials say personal information for 3,000 employees may have been stored on a laptop computer that was stolen. 3000
04/24/07

Purdue University

http://attrition.org/dataloss/2007/04/purdue01.html

 Exposed Online; Purdue University is informing 175 people who were students in fall 2001 that a Web page containing information about them was inadvertently available on the Internet. 175
04/19/07

New Mexico State University

http://attrition.org/dataloss/2007/04/nmsu01.html

Exposed Online; The names and Social Security numbers of more than 5,600 New Mexico State University students were accidentally posted on the school's Web site 5600
04/18/07

University of California, San Franscisco

http://attrition.org/dataloss/2007/04/ucsf02.html

Stolen Computer; A computer file server containing research subject information related to studies on causes and cures for different types of cancer was stolen from a locked UCSF office;

The server contained files with names, contact information, and social security numbers for study subjects and potential study subjects. For some individuals, the files also included personal health information.

3000
04/18/07

Ohio State University

http://attrition.org/dataloss/2007/04/osu02.html

 Stolen laptops; The personal information of about 3,500 current and former chemistry students was compromised when two laptop computers were stolen from the home of a university professor on Feb. 24. 3500
04/17/07

Ohio State University

http://attrition.org/dataloss/2007/04/osu01.html

 Hacking; The hacker breached a computer firewall and broke into a computer and stole the personal information of more than 14,000 current and former faculty and staff members; 14000
04/12/07

University of Pittsburgh Medical Center

http://attrition.org/dataloss/2007/04/upmc01.html

Exposed online; 80
04/12/07

Black Hills State University

http://attrition.org/dataloss/2007/04/bhsu01.html

Exposed online; Several students' social security numbers were mistakenly posted on the college's web site; 56
04/04/07

University of California, San Francisco

http://attrition.org/dataloss/2007/04/ucsf01.html

 Hacking; Social Security numbers, names, and bank information of about 46,000 on compromised server; Data on the server included names, social security numbers, and bank account numbers used for electronic payroll and reimbursement deposits. The server resides in the UC System-wide data center. 46000
03/30/07

University of Montana - Western

http://attrition.org/dataloss/2007/03/umw01.html

 Theft/Loss of Media; Between 400 and 500 current and former University of Montana-Western students are at risk of identity theft after a computer disk containing their Social Security numbers and other personal information was stolen from a professor's office 400
03/10/07 University of Idaho  http://attrition.org/dataloss/2007/03/uidaho01.html Exposed Online; A data file posted to the school's web site may have put at risk the personal information of approximately 2,700 university employees 2700
03/07/07 Los Rios Community College  http://attrition.org/dataloss/2007/03/losrios01.html Exposed Online; A student was googling his name & a Los Rios Community College District database popped up that included his name, birth date and Social Security number. The file also contained data on about 2,000 other students. 2000
03/02/07 Metropolitan State College of Denver http://attrition.org/dataloss/2007/03/mscd01.html Stolen Laptop; The stolen computer contained roster information (names & SSNs) of students enrolled in the faculty member's classes from the beginning of the 1999 fall semester to the end of the 2002 fall semester. The stolen computer was password protected. 988
03/01/07 Tokyo University of  Science     http://attrition.org/dataloss/2007/03/tus01.html Other; External hard drive was stolen;  Contained personal information of over 8800 students & graduates 8800
02/21/07 Georgia Tech University http://attrition.org/dataloss/2007/02/gatech01.html Hacking; The personal information of about 3,000 current and former Georgia Tech employees may have been compromised by unauthorized access to a Georgia Tech computer account by unknown sources outside the university 3000
02/15/07

City College of San Franscico http://attrition.org/dataloss/2007/02/ccsf01.html

 Exposed Online; The names, grades and social security numbers of 11,000 people were posted on an unprotected site after summer session in 1999. This allowed an outside vendor to prepare transcripts. But the site was never taken down. 11000
02/09/07

Radford University http://attrition.org/dataloss/2007/02/radford01.html

 Hacking; Security breach of a computer containing Social Security numbers and birthdates at RU's Waldron School of Health and Human Services 2400
02/09/07 East Carolina State University http://attrition.org/dataloss/2007/02/ecu01.html Exposed Online; Social Security numbers, names, and some credit card numbers for 65,000 posted to web 65000
02/09/07 Central Connecticut State University http://attrition.org/dataloss/2007/02/ccsu01.html Other;  Approximately 750 CCSU students have received mail from the Bursar's office that revealed their social security numbers in the name and address window of the envelopes.  750
02/07/07 University of Nebraska, Lincoln http://attrition.org/dataloss/2007/02/unl01.html Exposed Online; 72 Social Security numbers posted on public web site for over two years 72
02/02/07 University of Missouri  http://attrition.org/dataloss/2007/02/mu01.html Hacking; Personal information including Social Security numbers of 1,220 on hacked server 1220
01/26/07 Eastern Illinois University http://attrition.org/dataloss/2007/01/eiu01.html Stolen Computer;  Social Security numbers and names of 1,400 students on stolen computer 1400
01/26/07 Vanguard University http://attrition.org/dataloss/2007/01/vanguard01.html Stolen Computer; 5105
01/24/07 Rutgers University http://attrition.org/dataloss/2007/01/rutg01.html Stolen Laptop; 200
01/16/07 University of New Mexico  http://attrition.org/dataloss/2007/01/unm01.html Stolen Computers; Unknown
01/11/07 University of Idaho http://attrition.org/dataloss/2007/01/uidaho01.html Stolen Computers; 77000
01/08/07 Notre Dame University http://attrition.org/dataloss/2007/01/und01.html Stolen Laptop;  Unknown
12/27/06 Montana State University http://attrition.org/dataloss/2006/12/mtsu01.html Stolen Laptop; 259
12/22/06 Utah Valley State College http://attrition.org/dataloss/2006/12/uvsc01.html Exposed Online; Personal information, including Social Security numbers, started to show up on Yahoo's search engine in November. Thousands
12/19/06 Mississippi State University http://attrition.org/dataloss/2006/12/msu01.html Exposed Online; Social Security numbers and other information for about 2,400 exposed on web 2400
12/15/06 University of Colorado at Boulder http://attrition.org/dataloss/2006/12/ucb02.html Exposed Online; A server in the campus's Academic Advising Center was the subject of a computer attack.  17500
12/12/06 The University of Texas at Dallas        http://attrition.org/dataloss/2006/12/utdallas01.html Hacking; Social security numbers and other sensitive information relating to 5,000 students, faculty members and staff may have been exposed by a computer network intrusion.                                             5000
12/12/06 UCLA                    http://attrition.org/dataloss/2006/12/ucla02.html Hacking; One or more hackers have gained access to a centralized UCLA database containing personal information on about 800,000 of the university's current and former students, faculty and staff members, among others.       800000
12/09/06 Virginia Commonwealth University http://attrition.org/dataloss/2006/12/vcu02.html Erroneous email; Personal information of 561 students was inadvertently sent as attachments on Nov. 20 in an e-mail, including names, SSNs, local and permanent addresses and grade-point averages. The e-mail was sent to 195 students to inform them of their eligibility for scholarships.    561
11/28/06 Cal State Los Angeles  http://attrition.org/dataloss/2006/11/csula01.html Theft/Loss of Media; An employee's USB drive was inside a purse stolen from a car trunk. It contained personal information on 48 faculty members and more than 2,500 students and applicants of a teacher credentialing program. Information included names, SSNs, campus ID numbers, phone numbers, and e-mail addresses.    2882
11/17/06 Jefferson College of Health Sciences  http://attrition.org/dataloss/2006/11/jchs01.html Erroneous email; An email containing the names and SSNs of 143 students intended for one employee was inadvertently sent to the entire student body of 900. 143
11/13/06 Connors State College     http://attrition.org/dataloss/2006/11/conn01.html Stolen Laptop; On Oct. 15, a laptop computer was discovered stolen from the college. (It has since been recovered by law enforcement). The computer contains Social Security numbers and other data for Connors students plus 22,500 high school graduates who qualify for the Oklahoma Higher Learning Access Program scholarships. 22500
11/03/06 University of Virginia   http://attrition.org/dataloss/2006/11/uva01.html Erroneous Email; Due to a computer programming error, Student Financial Services sent e-mail messages to students containing 632 other students' Social Security numbers. 632
11/02/06 Villanova University http://attrition.org/dataloss/2006/11/villanova01.html Stolen Laptop; A laptop computer stolen from an insurance brokerage firm contained the names, birth dates and driver's license numbers of more than 1,200 Villanova University students and staff members 1200
10/19/06 University of Minnesota/Spain Stolen Laptop; In June, a University of Minnesota art department laptop computer stolen from a faculty member while traveling in Spain holds personally identifiable information of 200 students. 200
10/12/06 University of Texas at Arlington  http://attrition.org/dataloss/2006/10/uta01.html Stolen Computer; Two computers stolen from a University of Texas faculty member's home hold the names, SSNs, grades, e-mail addresses and other information belonging to approximately 2,500 students enrolled in computer science and engineering classes between fall 2000 and fall 2006. The theft occurred on September 29 and was reported on October 2.  2500
10/12/06 Brock University  http://attrition.org/dataloss/2006/10/brock01.html Hacking; The personal information - including some credit card and bank account numbers of about 70,000 people who gave money to Brock University has been stolen from the school's computers by a hacker; 70000
09/30/06 Adams State College   http://attrition.org/dataloss/2006/10/adams01.html Stolen Laptop; A laptop computer stolen from a locked closet at Adams State College contained personally identifiable data belonging to 184 high school students who participated in the college's Upward Bound program over the last four years. The theft occurred on August 14, but it was not until late September that staff realized the computer held students' data. 184
09/29/06 University of Iowa Psychology Department  http://attrition.org/dataloss/2006/09/ui01.html Hacking;A computer containing SSNs of 14,500 psychology department research study subjects was the object of an automated attack designed to store pirated video files for subsequent distribution. 14500
09/22/06 University of Colorado   http://attrition.org/dataloss/2006/09/ucb01.html Lost Computers; Two computers had been placed in storage during the school's move to temporary quarters in May. When they were to be retrieved Aug. 28, they were found missing. They had been used by 2 faculty members and included students' names, SSNs, and grades.                                                                UPDATE (9/25/06): One of the computers was found 1372
09/22/06 Purdue University   http://attrition.org/dataloss/2006/09/purdue01.html Hacking; A file in a desktop computer in the Chemistry Department may have been accessed illegitimately. The file contained names, SSNs, school, major, and e-mail addresses of people who were students in 2000. 2482
09/20/06 Berry College     http://attrition.org/dataloss/2006/09/berry01.html Student applications for need-based financial aid were misplaced by a consultant -- in both paper and digital form. Data included name, SSN, and reported family income for students and potential students for the 2005-06 academic year. 2093
09/15/06 The University of Texas at San Antonio http://attrition.org/dataloss/2006/09/utsa01.html Hacking; A server containing information on students,  including names, addresses and Social Security numbers  who have received financial aid in the past four years, as well as information on faculty and staff who have been employed at the university in the past four years was hacked; 64000
09/08/06 University of Minnesota  http://attrition.org/dataloss/2006/09/uminn01.html Stolen Computer; On August 14-15 eve, two computers were stolen from the desk of an Institute of Technology employee, containing information on students who were freshmen from 1992-2006 -- including names, birthdates, addresses, phone numbers, high schools attended, student ID numbers, grades, test scores, and, academic probation. SSNs of 603 students were also exposed. 13084
08/26/06 University of South Carolina  http://attrition.org/dataloss/2006/08/usc01.html Hacking; A security audit this summer found that a computer server was hacked in Sept. 2005. A database could have been accessed with names, SSNs, and birthdates of current and former students. 6000
08/15/06 University of Kentucky  http://attrition.org/dataloss/2006/08/uk01.html Exposed online;  Names & SSNs of students were posted to the Financial Aid website; 630
08/15/06 University of Kentucky http://attrition.org/dataloss/2006/08/uk01.html Email Erroneously Sent; Email sent listed SSNs of students; 80
08/01/06 Wichita State University  http://attrition.org/dataloss/2006/08/wsu01.html Hacking; Someone gained unauthorized access into 3 computers in the College of Fine Arts box office containing credit card info on  about 2000 patrons; 2000
08/01/06 Wichita State University Hacking;  An intrusion into a WSU psychology dept's server was discovered on July 16. 40
07/25/06 Belhaven College http://attrition.org/dataloss/2006/08/belhaven01.html Stolen Laptop;  Employee's laptop was stolen at gunpoint;  contained names & SSNs of employees; Unknown
07/25/06 Georgetown University Hospital http://attrition.org/dataloss/2006/07/guh01.html Exposed online; Patient data was exposed online via the computers of an e-prescription provider; 23000
07/14/06 Northwestern University  http://attrition.org/dataloss/2006/07/northwestern01.html Hacking; 9 desktop computers in Admissions and Financial Aid office were accessed containing Names & SSNs' 17000
07/14/06 University of Iowa http://attrition.org/dataloss/2006/07/iowau01.html Stolen Laptop; A latptop containing SSNs & names of former/current MBA students was stolen from a professor's home; 280
07/14/06 California Polytechnic State University (Cal Poly) http://attrition.org/dataloss/2006/08/calpoly01.html Stolen Laptop;  Laptop stolen from home of a physics professor including names, SSNs, or students from 1994-2004 3020
07/13/06 Moraine Park Technical College http://attrition.org/dataloss/2006/07/mptc01.html CD stolen;  Personal information including SSNs, addresses, names 1500
07/07/06 University of Tennessee  http://attrition.org/dataloss/2006/07/ut01.html Hacking; UT computer broken into containing SSNs, addreesses, and names 36000
06/23/06 San Francisco State University http://attrition.org/dataloss/2006/06/sfsu01.html Stolen Laptop;  Faculty laptop stolen from car containing SSNs & names 3000
06/20/06 University of Alabama, Birmingham http://attrition.org/dataloss/2006/06/uab01.html Stolen computer;  Contained confidential information of kidney transplant donors including names, SSNs and medical information 9800
06/16/06 University of Kentucky http://attrition.org/dataloss/2006/06/uk02.html Theft/Loss of Media; Personal data of current and former students including classroom rosters and personal data 6500
06/14/06 Western Illinois University http://attrition.org/dataloss/2006/06/wiu01.html http://attrition.org/dataloss/2006/07/wiu02.html Hacking;  breach in a server containing names, addresses, credit card numbers, and SSNs of people connected to the University 240000
06/09/06 Ohio University http://attrition.org/dataloss/2006/06/ohiou03.html Hacking; This one involves over 70,000 people, including subcontractors paid by OU over the past two years. 70000
06/06/06 University of Texas El Paso http://attrition.org/dataloss/2006/06/utep01.html Hacking; Students demonstrated that student body and faculty elections could be rigged by hacking into student information including SSN 4719
06/01/06 Miami (Ohio) University http://attrition.org/dataloss/2006/06/miami02.html Lost PDA;An employee lost a hand-held personal computer containing information of students 851
06/01/06 University of Kentucky  http://attrition.org/dataloss/2006/06/uk01.html Personal information of current and former employees including SSNs 1300
05/30/06 Florida International University http://attrition.org/dataloss/2006/05/fiu01.html Hacking; Hacker accessed a database that contained personal information, such as student and applicant’s names and SSNs Thousands
05/26/06 California State University, Stanislaus http://attrition.org/dataloss/2006/05/CSUStanislaus02.html  Exposed Online; Sensitive data on one of its file servers was indexed by Google; 1294
05/24/06 Sacred Heart University http://attrition.org/dataloss/2006/05/shu01.html http://attrition.org/dataloss/2006/05/shu02.html Hacking; Computer containing personal information including names, addresses, and SSNs was breached Unknown
05/16/06 University of California, Berkeley http://attrition.org/dataloss/2006/05/ucb03.html Exposed Online;  1200
05/04/06 Ohio University Hudson Health Center http://attrition.org/dataloss/2006/05/ohiou02.html Names, birth dates, SSNs and medical information of students 60000
05/01/06 Ohio University Hacking; A breach was discovered on a computer that housed IRS 1099 forms for vendors and independent contractors 2480
05/01/06 Ohio University http://attrition.org/dataloss/2006/05/ohiou01.html Hacking; A breach of a computer that hosted a variety of web-based forms, including some that processed on-line business transactions. Although this computer was not set up to store personal information, investigators did discover files that contained fragments of personal information, including Social Security numbers. The data is fragmentary and it is not certain if the compromised information can be traced to individuals. Also found on the computer were 12 credit card numbers that were used for event registration. 137000
04/26/06 Purdue University, School of Electrical & Computer Engineering http://attrition.org/dataloss/2006/04/purdue02.html Hacking;  Accessed personal information including SSNs of current and former grad students 1351
04/24/06 University of Virginia http://attrition.org/dataloss/2006/04/uva02.html Stolen Computer; Unknown
04/24/06 University of Texas McCombs School of Business http://attrition.org/dataloss/2006/04/ut04.html Hacking; Names, biographical information, SSNs, & DOB of current and prospective students, alumni, faculty members 197000
04/24/06 Ohio University Hacking; Alumni relations server containing biographical information and SSNs 300000
04/21/06 University of Alaska, Fairbanks http://attrition.org/dataloss/2006/04/boeing02.html Hacking;  38941
04/21/06 Ohio University Hacking; Emails, patent and intellectual property files, and 35 SSNs of current and former students, faculty, and staff 35
04/14/06 University of South Carolina http://attrition.org/dataloss/2006/04/usca01.html Erroneous Email; SSNs of students were mistakenly e-mailed to classmates 1400
04/09/06 University of Medicine and Dentistry of New Jersey http://attrition.org/dataloss/2006/04/umdnj01.html Hacking; SSNs & loan information of students and alumni 1850
03/29/05 University of Nebraska, Lincoln http://attrition.org/dataloss/2006/03/uneb01.html Exposed Online; SSNs & other information on students archived by Google; 342
03/24/06 California State University, Dominguez Hills http://attrition.org/dataloss/2006/03/doming02.html Stolen Laptop;  2486
03/24/06 Vermont State Colleges http://attrition.org/dataloss/2006/03/vsc01.html http://attrition.org/dataloss/2006/03/vsc02.html Stolen Laptop;  containing SSN and payroll data 14000
03/05/06 Georgetown University http://attrition.org/dataloss/2006/03/gu01.html Hacking; A cyber attack on a Georgetown University computer server that exposed personal information on 41,000 elderly District residents was discovered during a routine, internal inspection, 41000
03/03/06 Metropolitan State College; Denver, CO http://attrition.org/dataloss/2006/03/msc01.html Stolen laptop; Laptop stolen from employee's home containing names and SSNs of students who registered for courses 93000
02/18/06 University of Northern Iowa http://attrition.org/dataloss/2006/02/uni01.html Hacking; Laptop containg W-2 forms of student employees and faculty 6000
02/15/06 Old Dominion University http://attrition.org/dataloss/2006/02/odu01.html Exposed online;  instructor posted a class roster containing names and SSNs on a website 601
02/02/06 Stanislaus State University  Email erroneously sent; Workers in the financial aid department at Stanislaus State University in California are notifying thousands of students after an e-mail containing their private information was inadvertently sent to 97 students. 9200
02/01/06 University of Colorado, Colorado Springs http://attrition.org/dataloss/2006/02/uccs01.html Hacking;  Computer was hacked and infected with a virus 2500
01/27/06 College of St. Scholastica http://attrition.org/dataloss/2006/01/css01.html Stolen Computer; 12000 current & former students personal information on a computer which was stolen from a locked office in the college's Information Technology department; 12000
01/24/06 University of Washington Medical Center http://attrition.org/dataloss/2006/01/uwmc01.html Stolen laptops; 1600
01/23/06 University of Notre Dame http://attrition.org/dataloss/2006/01/nd01.html Hacking; The personal and financial information of some University donors may be at risk after an unknown intruder hacked into a Development Office server  Unknown
01/01/06 University of Pittsburgh Medical Center http://attrition.org/dataloss/2006/01/upmc01.html Stolen computers; 700
12/25/05 Iowa State University http://attrition.org/dataloss/2005/12/isu02.html Hacking; One of the computers held approximately 2,500 encrypted credit card numbers of athletics department donors. The second computer was used to enter time card information for several university departments and contained Social Security Numbers of more than 3,000 Iowa State staff.  5500
12/19/05 University of Delaware's School of Urban Affairs and Public Policy http://attrition.org/dataloss/2006/01/ud01.html Hacking;  Computer contained a portion of a database that included Social Security numbers for 159 graduate students 159
12/19/05 University of Delaware http://attrition.org/dataloss/2005/11/udel02.html Stolen hard drive; A back-up hard drive was stolen from the Department of Entomology and Wildlife Ecology;The hard drive contained personal information on a few individuals Unknown
12/16/05 Colorado Technical University Email erroneously sent;  containing names, phone numbers, email addresses, SSNs 1200
12/16/05 University of Kansas http://attrition.org/dataloss/2006/01/ku01.html Exposed online; Students who applied via the online application put out by the Department of Student Housing were alerted through either an e-mail or a letter that their private information might have been exposed. Unknown
12/09/05 Idaho State University http://attrition.org/dataloss/2005/12/IDU01.html Hacking; SSNs, dates of birth, & passwords on hacked computer Thousands
12/02/05 Cornell University http://attrition.org/dataloss/2005/12/cornell01.html Hacking;  900
12/01/05 University of San Diego http://attrition.org/dataloss/2005/12/usd01.html Hacking;  7800
11/11/05 Georgia Tech Office of Enrollment Services Stolen Computer; 13000
11/11/05 Indiana University's Kelley School of Business http://attrition.org/dataloss/2005/11/iukelley02.html Technicians at Indiana University discovered three malware programs on a Kelley School of Business instructor's computer during a routine scan earlier this month. The programs were believed to have been installed in August 2005 and last accessed in October 2005. The laptop computer contains personal information belonging to 5,278 students who took a certain Introduction to Business course between 2001 and 2005; all have been sent a letter informing them of the security breach.                                            The dean of the business school said all computers at the school are being audited to ensure proper configuration to allow automatic anti-virus and system software updates. 5278
11/04/05 Keck School of Medicine, USC http://attrition.org/dataloss/2005/11/keck01.html Stolen Computer; 50000
11/01/05 University of Tennessee Medical Center http://attrition.org/dataloss/2005/10/ut01.html Stolen laptop; 3800
10/29/05 University of Tennessee http://attrition.org/dataloss/2005/10/ut01.html Exposed Online; 1900 students & employees had information posted on the internet 1900
10/20/05 Vermont Technical College http://attrition.org/dataloss/2005/10/vtc01.html Exposed Online; Vermont Technical College mistakenly posted every student's Social Security number on the Internet for almost two years, college officials said.  Unknown
10/20/05 Monmouth University http://attrition.org/dataloss/2005/10/monmouth01.html Exposed Online; Monmouth University accidentally posted the names and Social Security numbers of 677 students on the Internet for 4 1/2 months before a student discovered the error. 677
10/15/05 Montclair State University http://attrition.org/dataloss/2005/10/montclair01.html Exposed online; Montclair State University posted the names and Social Security numbers of 9,100 undergraduates on the Internet for nearly four months. 9100
10/12/05 Ohio State University Medical Center Exposed online; 2800
09/29/05 University of Georgia http://attrition.org/dataloss/2005/09/uga01.html Hacking; A hacker broke into a computer database at the University of Georgia, gaining access to the Social Security numbers of employees in the College of Agricultural and Environmental Sciences and people who are paid from that department.  1600
09/22/05 City University of New York http://attrition.org/dataloss/2005/09/cuny01.html Exposed online; A law student Googling her own name found among the results documents that contained sensitive personal student data. School administrators apparently posted the documents on the university's central web site. Even after the school became aware of the situation and removed the files, Google's caching feature made the information available for a few more days. 350
09/15/05 Miami (Ohio) University http://attrition.org/dataloss/2005/09/miami01.html Exposed online; A report containing the Social Security numbers and grades of 21,762 Miami University students on all campuses enrolled in fall 2002 was publicly accessible via the Internet for nearly three years.A Miami graduate alerted the alumni office of the breach after she noticed the report while performing a Google.com search of her name. 21762
09/10/05 Kent State University http://attrition.org/dataloss/2005/09/kent02.html Stolen Computers; Stolen desktop computers contained names, grades, and SSNs of faculty and students. 100000
08/30/05 Stark State College of Technology http://attrition.org/dataloss/2005/08/stark01.html Exposed online; 7058 students have personal data exposed by software glitch; 7058
08/30/05 California State University’s Chancellor’s Office http://attrition.org/dataloss/2005/08/csu03.html Hacking; Computer virus attacks against a California State University computer storing financ