Database attack exposes personal data at University of Maryland

The data included names, Social Security numbers, birth dates and university ID numbers

Personal records for more than 309,000 students and staff were exposed this week in a "sophisticated" database attack at the University of Maryland, the university said Wednesday.

Birth dates, Social Security numbers, names and university ID numbers were compromised for people issued with a school ID and affiliated with the university's College Park and Shady Grove campuses since 1998, the school said.

Financial, academic, health and contact information such as phone numbers were not exposed, according to a statement attributed to Wallace D. Loh, the university's president.

The cause of the breach, which happened Tuesday, is unknown and an investigation is underway by federal and state law enforcement, Loh wrote. The school has 37,000 active students.

"Computer forensic investigators are examining the breached files and logs to determine how our sophisticated, multi-layered security defenses were bypassed," he wrote. "Further, we are initiating steps to ensure there is no repeat of this breach."

Personal records are valuable to cybercriminals, who can compile dossiers on victims for the purposes of financial fraud, such as opening bank accounts or taking out loans. The data may also be valuable for other types of targeted attacks, such as spear phishing.

The incident is the latest in a string of breaches that have affected companies and organizations, including the retailer Target and Neiman Marcus. The attacks against those companies focused on intercepting payment card details from point-of-sale devices.

The university said a specific database of records maintained by its IT division containing 309,079 records was accessed on Tuesday. Loh wrote the university recently doubled the number of IT security engineers and analysts as universities have been increasingly targeted.

"Obviously, we need to do more and better, and we will," he wrote.

Those affected are being contacted. The university is offering a year of free credit monitoring and advised people to be careful when sharing their personal information.

Send news tips and comments to jeremy_kirk@idg.com. Follow me on Twitter: @jeremy_kirk

Join the newsletter!

Or

Sign up to gain exclusive access to email subscriptions, event invitations, competitions, giveaways, and much more.

Membership is free, and your security and privacy remain protected. View our privacy policy before signing up.

Error: Please check your email address.

Tags data protectionintrusionUniversity of Maryland

Keep up with the latest tech news, reviews and previews by subscribing to the Good Gear Guide newsletter.

Jeremy Kirk

IDG News Service
Show Comments

Father’s Day Gift Guide

Brand Post

Most Popular Reviews

Latest Articles

Resources

PCW Evaluation Team

Luke Hill

MSI GT75 TITAN

I need power and lots of it. As a Front End Web developer anything less just won’t cut it which is why the MSI GT75 is an outstanding laptop for me. It’s a sleek and futuristic looking, high quality, beast that has a touch of sci-fi flare about it.

Emily Tyson

MSI GE63 Raider

If you’re looking to invest in your next work horse laptop for work or home use, you can’t go wrong with the MSI GE63.

Laura Johnston

MSI GS65 Stealth Thin

If you can afford the price tag, it is well worth the money. It out performs any other laptop I have tried for gaming, and the transportable design and incredible display also make it ideal for work.

Andrew Teoh

Brother MFC-L9570CDW Multifunction Printer

Touch screen visibility and operation was great and easy to navigate. Each menu and sub-menu was in an understandable order and category

Louise Coady

Brother MFC-L9570CDW Multifunction Printer

The printer was convenient, produced clear and vibrant images and was very easy to use

Edwina Hargreaves

WD My Cloud Home

I would recommend this device for families and small businesses who want one safe place to store all their important digital content and a way to easily share it with friends, family, business partners, or customers.

Featured Content

Don’t have an account? Sign up here

Don't have an account? Sign up now

Forgot password?