Shostack + Friends Blog Archive


University of Kansas, 9,200 SSNs, IT Department

[Update: Fixed headline, thanks to to anonymous.]

Students who applied via the online application put out by the
Department of Student Housing were alerted through either an e-mail or
a letter that their private information might have been exposed.

According to a University Relations news release, a computer file with
names, addresses, birth dates, phone numbers, social security numbers
and credit card numbers was found accessible to the public on Dec. 16.
The lack of security affected students who applied and paid an
application fee online between April 29, 2001, and Dec. 16, 2005. (From “University warns of possible hacking,” via Internet Security News.)

“I can’t believe they forgot to get the mother’s maiden name! How are we supposed to steal identities with just names, birthdates and SSNs?”

One comment on "University of Kansas, 9,200 SSNs, IT Department"

Comments are closed.