Loyola University Hard Drive Incorrectly Discarded, 5800 Victims

Technorati Tag:

Date Reported:
8/10/07

Organization:
Loyola University

Contractor/Consultant:
None

Number Affected:
5,800

Types of Data:
Name, limited loan information and Social Security number

Breach Description:
A computer originally thought and reported to be stolen was actually incorrectly and improperly discarded, leaving the data on unprotected.

Reference URL:
http://www.suntimes.com/news/metro/504805,CST-NWS-loyola10.article
http://www.wandtv.com/Global/story.asp?S=6914214

Report Credit:
Associated Press

Response:
From the online articles listed above:

"Although we have no evidence that any of this personal information has or will be accessed, we want you to take every possible step to safeguard your privacy," Loyola vice president and chief information officer Susan M. Malisch said in the letter.

The desktop computer was an obsolete one previously used by the university's Information Technology Services department.

The university is offering one year of free credit monitoring to all affected individuals.
[Comfyllama] Universities don't always offer this service.

Commentary:
This story emphasizes the importance of discarding all confidential information in a secure manner.  Shred confidential documents, overwrite multiple times/destroy and/or degauss hard drives and electronic media, or encrypt.

Past Breaches:
None since August 2007


 
Trackbacks
  • No trackbacks exist for this post.
Comments
  • No comments exist for this post.
Leave a comment