Attrition.org, a computer security company/website, maintains a current list of information on security/data breaches at http://attrition.org/dataloss. This list looks like a who’s who of U.S. businesses and organizations. A few universities on this list in the last five months are:
* Wichita State University, Aug. 1, credit card and other information, over 2,000 people
* Cal Poly, Aug. 1, about 3020 Social Security numbers on a stolen laptop
* Ohio University Hudson Health Center, May 11, names, birth dates, Social Security numbers and medical information, 60,000 people accessed
* Ohio University, May 2, records breached for 300,000 people/organizations, including 137,000 Social Security numbers
* Purdue University School of Electrical and Computer Engineering, April 26, notified 1,351 following breach involving Social Security numbers
* University of Texas McCombs School of Business, April 23, Social Security numbers, 197,000 people
* University of Alaska Fairbanks, April 21, personal information of 38,941 possibly stolen by hacker
* University of South Carolina, April 14, Social Security numbers of 1,400 students
* University of Medicine and Dentistry of New Jersey, April 9, about 2,000 students and alumni, Social Security numbers and financial information exposed
* Georgetown University, March 5, names, Social Security numbers, birthdates of 41,000
* Metropolitan State College, March 3, about 93,000 Social Security numbers and student names, possibly on stolen laptop
What needs protected?
Data that needs secured and protected includes:
* Social Security number
* Drivers license number
* Credit card, debit card and financial account numbers
* Access codes
* Race and ethnicity
* Student records protected by the Family Educational Rights and Privacy Act
* Health and medical records, protected by the Health Insurance Portability and Accountability Act
* Library usage records
