7,000 hit in UCSF security blunder

By

The University of California San Francisco is notifying 7,000 employees and students that their personal information may have been accessed by an intruder who broke into a campus server.

According to Ken Orgill, assistant vice chancellor for IT services and campus CIO, there is no evidence the data was accessed.


The server was immediately taken offline after the incident, which occurred in late February, UCSF officials said in a statement emailed to SC Magazine.

The server contained names, Social Security numbers, and in some cases, banking information, of employees, students, and contractors who did business with the university. The system, which resides in the campus data center, did not contain patient data.

"New security protocols and internal procedures have now been put in place to prevent a similar situation in the future," campus officials said.

Earlier this week, UC Berkeley Chancellor Robert Birgeneau promised to improve data security in the wake of the theft of a campus laptop containing personal data of 98,000 graduate students, alumni and applicants.

www.ucsf.edu

Got a news tip for our journalists? Share it with us anonymously here.
Copyright © SC Magazine, US edition
Tags:

Most Read Articles

Microsoft knew of SharePoint security flaw in May, initial patch ineffective

Microsoft knew of SharePoint security flaw in May, initial patch ineffective

ACSC alerts to exploited MS SharePoint remote code execution flaw

ACSC alerts to exploited MS SharePoint remote code execution flaw

"PoisonSeed" attack does not bypass hardware MFA

"PoisonSeed" attack does not bypass hardware MFA

Qantas obtains court order to prevent third-party access to stolen data

Qantas obtains court order to prevent third-party access to stolen data

Log In

  |  Forgot your password?