Outside Company Uncovers New Mexico State Data Exposure

A company that monitors the Internet for unauthorized exposure of information recently informed New Mexico State University that data about 300 students had appeared on a computer unaffiliated with the university. Tiversa, a risk mitigation company, notified the institution that it had detected information, including Social Security numbers, related to New Mexico State students on a computer with peer-to-peer file sharing software.

The university contracted with the vendor to determine the type of data exposed and the extent of that exposure, according to Shaun Cooper, associate vice president and CIO. "Through our investigation with Tiversa, we learned that a faculty member teaching a course in 2006 had transferred a student data file for course reporting purposes to a teaching assistant's laptop via e-mail. After the teaching assistant left [the university] in 2007, peer-to-peer file sharing software was installed on the teaching assistant's laptop. Eventually, the student data file was accessed via the file sharing software, without the computer owner's knowledge."

The university contacted the former teaching assistant, who deleted the file from the laptop, Cooper said. It also issued a cease-and-desist letter to the owner of the computer to which the file had been transferred. "The order legally forbids the computer owner from possessing the file that contains the NMSU students' information," Cooper said.

New Mexico State also sent letters to the students whose data may have been compromised and provided them with information about actions they could take to deal with identity theft.

In the years since that data was taken off campus, New Mexico State has implemented several measures to safeguard the personal information of students, faculty, and staff including: the elimination of Social Security numbers from daily business transactions with students; doing more security training with staff and faculty; implementing policies such as requiring that university data be deleted from personal computers when faculty, staff, and students leave NMSU employment; and prohibiting New Mexico State data from being stored on portable or removable electronic media.

"Along with NMSU's faculty and administration, I sincerely regret this incident of unauthorized student data exposure," Cooper said. "We want to assure the entire university community that we place the highest priority on safeguarding all personal information and that we will continue to upgrade our technology and evaluate our policies to make sure that personal data remains secure."

About the Author

Dian Schaffhauser is a former senior contributing editor for 1105 Media's education publications THE Journal, Campus Technology and Spaces4Learning.

Featured

  • abstract pattern with interconnected blue nodes and lines forming neural network shapes, overlaid with semi-transparent bars and circular data points

    Data, AI Lead Educause Top 10 List for 2025

    Educause recently released its annual Top 10 list of the most important technology issues facing colleges and universities in the coming year, with a familiar trio leading the bunch: data, analytics, and AI. But the report presents these critical technologies through a new lens: restoring trust in higher education.

  • digital brain made of blue circuitry on the left and a shield with a glowing lock on the right, set against a dark background with fading binary code

    AI Dominates Key Technologies and Practices in Cybersecurity and Privacy

    AI governance, AI-enabled workforce expansion, and AI-supported cybersecurity training are three of the six key technologies and practices anticipated to have a significant impact on the future of cybersecurity and privacy in higher education, according to the latest Cybersecurity and Privacy edition of the Educause Horizon Report.

  • Campus Technology Product Award

    Call for Entries: 2024 Campus Technology Product Awards

    The entry period for the 2024 Campus Technology Product Awards is now open.

  • open laptop with screen depicting a glowing, holographic figure surrounded by floating symbols of knowledge like books, equations, and lightbulbs

    Cengage Intros Gen AI Student Assistant Beta

    Ed tech company Cengage has announced the beta launch of Student Assistant, a generative AI tool designed to guide students through the learning process with personalized resources and feedback.