UCLA database breach: a candidate for localization
December 12, 2006 in Academics
Tomorrow’s daily newspapers will likely have stories about one of the largest data security breaches in U.S. history, a database with 800,000 student records at UCLA. Here’s the university’s press release about the breach. According to The Lede, the NYT blog: #
The amount of personal data held by universities often make them a particularly juicy target for hackers. And lax network security — sometimes in place to facilitate communication across departments and schools and institutes, all linked under a rangy university system — can make them easy targets. #The maddening thing is that the attacks on the UCLA database apparently went on for over a year, according to the AP story. #
It’s sad that so many college newspapers are finished publishing for the fall semester, because this is a story that begs to be localized and given context at every college campus. It’s also a good opportunity to do some enterprise stories on identity theft and what to do if your identity is stolen (quick answer: waste a lot of time banging your head against bureaucratic walls). #
The slowly changing practice of using social security numbers for student IDs is finally dwindling (from what I’ve been able to tell, anyway), but network security is an ongoing concern. #
Update: corrected information in para. 1. #
I don't think this was the largest data security breach in US history (unfortunately!).
Admittedly, it's a bit of an unanswerable (what are the relative values of various types of personal data, anyway?), but last year's theft of 40 million credit card records must top the UCLA breach.
http://news.com.com/Credit+card+breach+exposes+40…
Interesting post. I have made a twitter post about this. Hope others find it as interesting as I did.