Data security top tech issue for colleges

A computer break-in at Harvard University highlights the growing challenges the nation's colleges and universities face in trying to safeguard students' private information.

HARVARD: Thousands exposed in data breach

Security and privacy are the No. 1 technology concern for schools, according to an annual survey of 535 colleges and universities by Educause, which will publish the results in May. The Washington, D.C., organization works with universities on a range of information technology issues, including securing its systems.

"Data security incidents have been epidemic in the last two to three years and not just at colleges and universities," says Rodney Petersen, Educause's security task force coordinator, who works with schools to secure their databases. "It's a significant problem and source of concern."

The most recent college breach occurred at the Harvard Graduate School of Arts and Sciences in February, when a hacker broke into a Web server that contained personal information on 10,000 grad-school applicants. The information ranged from Social Security numbers and addresses to food allergies and housing preferences.

FIND MORE STORIES IN: Washington | Web | Social Security | Harvard University | Sciences | Bay | Pirate | Educause | Rodney Petersen

The server contained data on students who applied to the graduate school for the 2007 school year and graduate housing applicants for 2006 and 2007. There was no financial information.

The university has found no evidence that the data has been used in identity theft, says Daniel Moriarty, Harvard's chief information officer.

"The reason we moved to notify individuals was as a precaution" because the school does not know the extent of the breach, he says.

University officials took down the site on Feb. 17 after they learned that 19 student housing records had shown up on a website called Pirate's Bay, where hackers show off their work. Since then, the school has sent letters to all students whose records were on the server and has offered to pay for credit-protection services.

In 2007, there were 139 reported information security incidents at colleges and universities around the world, a 68% increase from the previous year, according to a report by Educational Security Incidents, which tracks information security breaches in higher education.

Incidents range from stolen laptops containing student and employee data to breaches of the schools' network systems. The most common data pilfered are names, addresses, ages and Social Security numbers, the report says.


http://www.usatoday.com/