U Nebraska Breach Could Hit 654,000 Student Records

An Oracle PeopleSoft-based student information system in place since 2010 has been breached at the University of Nebraska Lincoln. The hacked database contains personal records for students, alumni and applicants of the university's four campuses. According to some media reports, the database contains 654,000 records going back to 1985. However, currently, the university is especially concerned about the data for 30,000 people who specifically had banking information stored in the system.

According to a question-and-answer page on a new security Web page created by the university, a Computing Services Network staff member discovered on May 25, 2012, Friday, that somebody had gained access to the student system. "This was a sophisticated and skilled attack on our system that was discovered and shut down within hours of its discovery," the FAQ stated. It didn't provide details about how the breach occurred.

That particular database contains records for students, parents, employees, alumni, and applicants, for managing admissions, housing, and course registration. It holds Social Security numbers, addresses, transcripts, grades, and other student data, as well as personal and financial information of parents of students who had applied for financial aid and university staff members. However, the database contains no credit card information.

U Nebraska sent a letter to those whose financial information is vulnerable, advising them to monitor their financial accounts "closely in the coming weeks" and to report suspicious activities to their banks. The same letter also suggested they place a fraud alert on their credit files. The university hasn't offered to pay to provide that service free to those who could be affected.

So far, said Information Security Officer Joshua Mauk, there has been "no clear evidence" that anybody's personal information was actually downloaded. Nor have there been any reports of identity theft related to the breach.

Technical staff have been working "around the clock," Mauk said, to identify other individuals who may be at increased risk. "It is our responsibility to continue to notify those potentially impacted by this breach as quickly as possible."

According to Mauk, the institution is working with law enforcement to establish the extent of the breach. The university has also has hired a firm specializing in data breaches to assist in a forensics investigation.

The university recommended that anybody whose information could be contained in the system refer to a Federal Trade Commission Web site offering guidance about identity theft.

The near-$30 million system, based on PeopleSoft Campus Solutions, was set up in 2010 after a multi-year implementation. At the time the selection of PeopleSoft was announced, Nebraska State College System's Chancellor Stan Carpenter said, "We believe that Oracle offers the best combination of functionality, support, and cost-effectiveness, and we are confident that the Campus Solutions system will provide excellent accountability and reliable records management."

About the Author

Dian Schaffhauser is a former senior contributing editor for 1105 Media's education publications THE Journal, Campus Technology and Spaces4Learning.

Featured

  • interconnected cloud icons with glowing lines on a gradient blue backdrop

    Report: Cloud Certifications Bring Biggest Salary Payoff

    It pays to be conversant in cloud, according to a new study from Skillsoft The company's annual IT skills and salary survey report found that the top three certifications resulting in the highest payoffs salarywise are for skills in the cloud, specifically related to Amazon Web Services (AWS), Google Cloud, and Nutanix.

  • AI-inspired background pattern with geometric shapes and fine lines in muted blue and gray on a dark background

    IBM Releases Granite 3.0 Family of Advanced AI Models

    IBM has introduced its most advanced family of AI models to date, Granite 3.0, at its annual TechXchange event. The new models were developed to provide a combination of performance, flexibility, and autonomy that outperforms or matches similarly sized models from leading providers on a range of benchmarks.

  • landscape photo with an AI rubber stamp on top

    California AI Watermarking Bill Garners OpenAI Support

    ChatGPT creator OpenAI is backing a California bill that would require tech companies to label AI-generated content in the form of a digital "watermark." The proposed legislation, known as the "California Digital Content Provenance Standards" (AB 3211), aims to ensure transparency in digital media by identifying content created through artificial intelligence. This requirement would apply to a broad range of AI-generated material, from harmless memes to deepfakes that could be used to spread misinformation about political candidates.

  • happy woman sitting in front of computer

    Delightful Progress: Kuali's Legacy of Community and Leadership

    CEO Joel Dehlin updates us on Kuali today, and how it has thrived as a software company that succeeds in the tech marketplace while maintaining the community values envisioned in higher education years ago.