U Nebraska Breach Could Hit 654,000 Student Records

An Oracle PeopleSoft-based student information system in place since 2010 has been breached at the University of Nebraska Lincoln. The hacked database contains personal records for students, alumni and applicants of the university's four campuses. According to some media reports, the database contains 654,000 records going back to 1985. However, currently, the university is especially concerned about the data for 30,000 people who specifically had banking information stored in the system.

According to a question-and-answer page on a new security Web page created by the university, a Computing Services Network staff member discovered on May 25, 2012, Friday, that somebody had gained access to the student system. "This was a sophisticated and skilled attack on our system that was discovered and shut down within hours of its discovery," the FAQ stated. It didn't provide details about how the breach occurred.

That particular database contains records for students, parents, employees, alumni, and applicants, for managing admissions, housing, and course registration. It holds Social Security numbers, addresses, transcripts, grades, and other student data, as well as personal and financial information of parents of students who had applied for financial aid and university staff members. However, the database contains no credit card information.

U Nebraska sent a letter to those whose financial information is vulnerable, advising them to monitor their financial accounts "closely in the coming weeks" and to report suspicious activities to their banks. The same letter also suggested they place a fraud alert on their credit files. The university hasn't offered to pay to provide that service free to those who could be affected.

So far, said Information Security Officer Joshua Mauk, there has been "no clear evidence" that anybody's personal information was actually downloaded. Nor have there been any reports of identity theft related to the breach.

Technical staff have been working "around the clock," Mauk said, to identify other individuals who may be at increased risk. "It is our responsibility to continue to notify those potentially impacted by this breach as quickly as possible."

According to Mauk, the institution is working with law enforcement to establish the extent of the breach. The university has also has hired a firm specializing in data breaches to assist in a forensics investigation.

The university recommended that anybody whose information could be contained in the system refer to a Federal Trade Commission Web site offering guidance about identity theft.

The near-$30 million system, based on PeopleSoft Campus Solutions, was set up in 2010 after a multi-year implementation. At the time the selection of PeopleSoft was announced, Nebraska State College System's Chancellor Stan Carpenter said, "We believe that Oracle offers the best combination of functionality, support, and cost-effectiveness, and we are confident that the Campus Solutions system will provide excellent accountability and reliable records management."

About the Author

Dian Schaffhauser is a former senior contributing editor for 1105 Media's education publications THE Journal, Campus Technology and Spaces4Learning.

Featured

  • AI-inspired background pattern with geometric shapes and fine lines in muted blue and gray on a dark background

    IBM Releases Granite 3.0 Family of Advanced AI Models

    IBM has introduced its most advanced family of AI models to date, Granite 3.0, at its annual TechXchange event. The new models were developed to provide a combination of performance, flexibility, and autonomy that outperforms or matches similarly sized models from leading providers on a range of benchmarks.

  • abstract pattern with interconnected blue nodes and lines forming neural network shapes, overlaid with semi-transparent bars and circular data points

    Data, AI Lead Educause Top 10 List for 2025

    Educause recently released its annual Top 10 list of the most important technology issues facing colleges and universities in the coming year, with a familiar trio leading the bunch: data, analytics, and AI. But the report presents these critical technologies through a new lens: restoring trust in higher education.

  • illustrated university campus with modern buildings, glowing binary code streaming straight and dynamically from multiple directions, integrated into the architecture, surrounded by stylized trees, grass, and walkways

    3 Ways Institutions Can Become Data-Driven Organizations

    Faced with declining enrollments and changing demographics, colleges and universities must make use of data and analytics to better serve students.

  • blue and green lines intersecting and merging in an abstract pattern against a light gray background with a subtle grid design

    Data Integration Market: Cloud Giants Down, AI Up

    "By 2027, AI assistants and AI-enhanced workflows incorporated into data integration tools will reduce manual intervention by 60 percent and enable self-service data management," according to research firm Gartner.