Data Breach at Syracuse University Leaves Almost 10,000 Names, SSNs Exposed

Data Breach at Syracuse University Leaves Almost 10,000 Names, SSNs Exposed

  • By Matt Jones
  • February 11, 2021

Syracuse University has recently informed about 9,800 of its students, alumni, and applicants of a data security breach that might have exposed their names and Social Security numbers. This week, the university mailed a letter to affected individuals telling them of the incident and updating them on the progress of their investigation so far.

The breach occurred sometime between Sept. 24 and Sept. 28, 2020, when an unauthorized individual accessed a Syracuse employee’s email account. The university launched its investigation in early January and discovered that emails and attachments in the account contained private information, like names and associated Social Security numbers. Despite cooperation with a computer forensics firm, the university has been “unable to determine” whether the unauthorized individual accessed or viewed this private information.

In a statement to the SU campus newspaper, The Daily Orange, senior associate vice president Sarah Scalese said, “To date, we are unaware of any misuse of the information maintained in the employee’s email account, nor do we have any evidence that private, personal information was actually viewed.”

The university has since teamed up with consumer credit reporting company Experian to provide potentially affected individuals with a free membership. The Experian service focuses on personal identity protection support and identifying misuse of personal information. Use of the service will not affect students’ credit scores, according to the letter mailed out this week.

SU has also announced that it is establishing additional security resources like cybersecurity training and phishing training for employees who handle personal information.

“We sincerely regret any concern this incident may have caused,” said Scalese.

The university has not yet addressed the specifics of how the breach occurred. Nor have they addressed why they waited nearly a month between starting their investigation and informing those potentially affected. According to an editorial from The Daily Orange, the university has also neglected to send out any campus-wide news release or similar notification that the incident happened.

Sources:
http://dailyorange.com/2021/02/names-social-security-numbers-of-syracuse-university-students-exposed-in-data-breach/
http://dailyorange.com/2021/02/data-breach-syracuse-universitys-silence-glaring/

About the Author

Matt Jones is senior editor of Spaces4Learning and Campus Security and Life Safety. He can be reached at [email protected]

Featured

  • Door Hardware and Campus Security: Enhancing Safety in Schools

    The importance of investing in school safety cannot be overstated, but knowing where to start implementation of school safety features can be a challenge. A recent survey by the National Center on Education Statistics found that a quarter of U.S. public schools have classrooms with doors that can't be locked from the inside. Even among schools with doors that do lock, recent legislation reflects a common misconception that simply keeping the doors locked all day will eliminate the potential for an attack, in direct violation of PASS (Partner Alliance for Safer Schools) Guidelines. Read Now

  • Brigham Young University Strengthens Campus Security With Genetec Operations Center

    Genetec Inc, a provider of enterprise physical security software, announced that Brigham Young University's (BYU) has optimized its security operations with the Genetec™ Operations Center work management system. Read Now

  • AI-based Risk Mitigation: The Next Advancement in Video Surveillance and Public Safety

    Safety is at the forefront of every organization and covers a gamut of scenarios, not just weapon-fueled lethal threats. It also includes smaller-scale and everyday situations like slipping hazards, fallen persons, unauthorized vehicles, and more. These issues cause disruptions in daily operations and cost companies and facilities money and downtime, so a fully realized security plan must involve actions that facility personnel should take once a hazard of any size occurs. Informing everyone that a hazard exists, where it’s located, and what actions to take is imperative for maintaining personal safety. Read Now

  • Fort Worth ISD Strengthens Event Safety

    The issue of concealed weapons being introduced into school extracurricular activities, including sporting events and graduations, became a growing concern in communities across the nation. According to the K-12 School Shooting Database, there were at least 202 incidents of gunfire on school grounds in 2024 across the United States, resulting in 56 deaths and 147 injuries, underscoring the urgent need for enhanced safety protocols. Read Now

Most   Popular