Moodle Hacked at Oregon College

  • By Dian Schaffhauser
  • 03/14/08
Umpqua Community College in Winchester, OR announced in February that its Moodle course management system had been hacked earlier in the year, potentially exposing student information. According to a statement from the college, there was no evidence that personal records had been affected. The school also noted that the IT department knew how the system had been compromised and had taken steps to address the security vulnerabilities, which included shutting Moodle down temporarily.

Now all users of the college's applications--which include Angel LMS from Angel Learning, Banner from Sungard Higher Education, and the school's portal--must also set up new PINs to prevent the misuse of any data collected during the Moodle breach.

According to an article in The News-Review, a Winchester newspaper, the college became aware of the breach when the system slowed down. An IT investigation uncovered a message from the hacker that had been planted in the system. That same examination revealed that user account information--including names, passwords, and demographic details--had been stored in the software.

The campus had been a long-time user of the open source application, which was being supported by an external service provider. On the Moodle system, students received assignments, completed and turned in course work, and communicated with their instructors.

The school had migrated to Angel in 2007 but implemented Moodle internally at the same time in order to support its nursing program, which wasn't ready to move to a new platform. It was that installation that had been run without safeguards and that lacked a critical security patch, according to The News-Review.

Other instructors outside of nursing were also continuing with their use of Moodle. When IT shut down the internal deployment of Moodle, several professors said they'd be willing to cover the expense of moving the installation to an outside firm that could host the software. The college chose to pay for a similar hosting service but has assigned a task force to decide whether Moodle will continue being used in the future.

About the Author

Dian Schaffhauser is a former senior contributing editor for 1105 Media's education publications THE Journal, Campus Technology and Spaces4Learning.

Featured

  • From Fire TV to Signage Stick: University of Utah's Digital Signage Evolution

    Jake Sorensen, who oversees sponsorship and advertising and Student Media in Auxiliary Business Development at the University of Utah, has navigated the digital signage landscape for nearly 15 years. He was managing hundreds of devices on campus that were incompatible with digital signage requirements and needed a solution that was reliable and lowered labor costs. The Amazon Signage Stick, specifically engineered for digital signage applications, gave him the stability and design functionality the University of Utah needed, along with the assurance of long-term support.

  • Microsoft

    Microsoft Introduces Its First Quantum Computing Chip

    Microsoft has unveiled Majorana 1, its first quantum computing chip, aimed at deployment in datacenters.

  • interconnected glowing nodes and circuits in blue and green, forming a neural network on a dark background with a futuristic design

    Tech Giants Launch $100 Billion AI Infrastructure Network Project

    OpenAI, SoftBank, and Oracle have unveiled a new venture, Stargate, through which they aim to build a massive AI infrastructure network across the United States. The initiative, which was announced at the White House with President Donald Trump, has been described as the "largest AI infrastructure project in history."

  • glowing digital shield with a checkmark in the center, surrounded by interconnected lines and nodes on a dark blue background with subtle circuit patterns

    Navigating CMMC 2.0: New Cybersecurity Standards Impact Higher Education

    In October 2024, the Department of Defense published a new update to its Cybersecurity Maturity Model Certification enforcing new cybersecurity standards on universities and colleges. With Phase 1 beginning this year, here's what the new requirements mean for higher ed.