Wednesday, January 6, 2010

Happy 2010 - Data Breach du Jour

We are just barely into the new year, and there is already a rather large data breach to report.

Officials at Eastern Washington University (EWU) are notifying up to 130,000 current and former students that their personal information may have been exposed in a security breach, reports the Seattle Times. The data involved includes names, Social Security numbers and dates of birth for students going back to the year 1987. Information technology staff discovered the breach during a network assessment.

The takeaway here: A good New Year's resolution should be to conduct a network assessment of your own enterprise during Q1 and if you do not have a records retention policy in place ---> get one. Keeping personal information for more than 20 years is a data breach waiting to happen.

Link
Local News Hacker may have accessed EWU student information Seattle Times Newspaper