NOW READ THIS
("Security Advisory")



Submitted by: Bill Hickey
NCVA Listmaster
Distributed via NCVA REFLECTOR: 2007-01-19 0227z

NRT-0001 COMPUTER SECURITY:

Two universities have disclosed data security breaches. Be aware that two have DISCLOSED them, there are doubtless others out there; some known, some still waiting to be discovered. For those who have gone back to school, or even those alums who might be concerned, you might want to do an inventory of your own online policies and check with your alma mater if appropriate.

The University of Idaho in Moscow began sending letters to more than 331,000 people warning them about the potential compromise of their personal data following the theft of three desktop computers in November. The computers stolen from the University of Idaho were being used by its advancement services office and contained names, addresses and Social Security numbers of university alumni, donors, employees and students. Meanwhile, in a separate incident, officials at the University of Arizona in Tucson are investigating a computer break-in that disrupted several school services and continued to keep an online procurement system offline. The unauthorized access, in which multiple servers and workstations appear to have been illegally accessed in November and December, was discovered on January 2, according to a statement from the school. The director of the university's center for computing and IT said that upwards of 30 Windows-based servers - including domain name servers and 350 workstations - were illegally accessed by what appears to have been a hacker or hackers based in France. In addition to installing movies and games on the systems, the hackers apparently also installed key-stroke logging software on some of the systems. The FBI is currently investigating the incident.



Last Modified: Saturday, 20-Jan-2007 01:00:16 EST