U Hawaii Settles Data Breach Class Action Suit

The University of Hawaii system has settled a class action lawsuit filed on behalf of 96,000 students, faculty, staff, and alumni who were part of five alleged data breaches at four institutions between 2009 and 2011. The university, which has denied liability in the settlement, will provide two years of credit monitoring and credit restoration services to those whose personal data was exposed online and participated in the lawsuit.

"We have researched more than 40 data breaches at colleges and universities across the country. In almost every instance, two years of credit monitoring and fraud restoration were offered to data breach victims," said Bruce Sherman, one of the attorneys representing the class involved in the lawsuit. "Offering two years of credit monitoring and fraud restoration services to breach victims should be the standard response by any breaching entity in Hawaii, including government agencies."

According to Thomas Grande, who worked with Sherman on the suit, credit monitoring services cost as much as $5 to $15 per month if purchased individually. "We are extremely pleased that the University has negotiated a settlement package that provides these services to every class member who wants them," Grande said.

However, that's a fraction of the cost to the organization that suffers a breach, according to research by privacy and security research firm Ponemon Institute. The results of its 2011 survey, "U.S. Cost of a Data Breach Study," estimated that American companies spend $214 per compromised record. That includes the direct costs of a breach, such as notification and legal defense expenses, but also indirect costs such as lost business due to customer churn.

The credit monitoring service for U Hawaii recipients will be provided by Kroll Background America. Under the terms of the settlement, potential recipients of the service will be notified by letter and email by March 1, 2012.

"The university continues to work diligently so that the chance of future data breaches is significantly reduced," the institution said in a statement. "Given the uncertainties and expense of litigation, the university believes this settlement is in the best interests of the university and its entire 'ohana.'"

Among the breaches was one in 2010 that exposed the Social Security numbers of about 40,000 students who attended the University of Hawaii Manoa. Another breach earlier that year involved 53,000 students, and a 2009 breach affected 15,487 parents and students.

About the Author

Dian Schaffhauser is a former senior contributing editor for 1105 Media's education publications THE Journal, Campus Technology and Spaces4Learning.

Featured

  • young man in a denim jacket scans his phone at a card reader outside a modern glass building

    Colleges Roll Out Mobile Credential Technology

    Allegion US has announced a partnership with Florida Institute of Technology (FIT) and Denison College, in conjunction with Transact + CBORD, to install mobile credential technologies campuswide. Implementing Mobile Student ID into Apple Wallet and Google Wallet will allow students access to campus facilities, amenities, and residence halls using just their phones.

  • glowing blue AI sphere connected by fine light lines, positioned next to a red-orange shield with a checkmark

    Cloud Security Alliance Offers Playbook for Red Teaming Agentic AI Systems

    The Cloud Security Alliance has introduced a guide for red teaming Agentic AI systems, targeting the security and testing challenges posed by increasingly autonomous artificial intelligence.

  • Stylized illustration of an AI microchip connected to a laptop, server rack, and monitor with a chart

    HPE and Nvidia Announce Expanded AI Infrastructure Partnership

    Hewlett Packard Enterprise and Nvidia have expanded their partnership to accelerate enterprise artificial intelligence adoption through new modular infrastructure and turnkey AI platform offerings.

  • cloud and circuit patterns with AI stamp

    Cloud Management Startup Launches Infrastructure Intelligence Tool

    A new AI-powered infrastructure intelligence tool from cloud management startup env0 aims to turn the fog of sprawling, enterprise-scale deployments into crisp, queryable insight, minus the spreadsheets, scripts, and late-night Slack threads.