The names and Social Security numbers of approximately 450 University of Rochester students and former students were accessed and copied from a non-academic student database to an off-campus IP address. The problem was discovered on the evening of Jan. 7, 2009. Information Technology security staff analyzed the “traffic” to this computer database from June 2006 to Jan. 7, 2009 and this was the only instance found.
Notifications to the 450 current and former students impacted by this security breach were sent on Saturday January 10, 2009. These notifications, which included information on credit monitoring services, were sent via email and U.S. mail. If you did not receive a notification, you are not affected by this breach.
Social Security Number is a data element in our integrated student systems environment. The system has information about people who are or were students at the University.
At the University of Rochester, students are identified by randomly generated numbers and keep those IDs throughout their college years. We have not used Social Security numbers as the prime way to identify students since 2001. Still, certain offices are required by law to continue to keep a student’s Social Security number for tax purposes and for other reasons.
The investigation is continuing.
Our Information Technology staff works hard to provide a secure environment for the tens of thousands of computers that are part of our network. We continue to further strengthen our current security processes and systems to minimize the chance of this kind of intrusion happening again.
We will provide without charge a year of credit monitoring and related identity theft insurance. Details will be sent directly to those whom we believe had their personal information copied. We have contracted with Equifax, one of the three major credit monitoring bureaus, to supply this service. Every individual who we believe was affected by this intrusion will receive a personalized code to register within 120 days and take advantage of the offer. Please register atwww.myservices.equifax.com/tri
Also, federal law allows all consumers one free credit report per year from each of the national credit bureaus — Equifax, Experian, and TransUnion — through the Annual Credit Report Request Service. Access this service on the Web at www.annualcreditreport.com or call toll-free 877-322-8228. You can either request all three reports at once or request them individually at different times throughout the year. You can request the reports whether or not you believe that your data was compromised by a hacking incident.
The following agencies also can provide additional information about identity theft:
Identity theft occurs when someone uses your name, Social Security number, credit card number, or some other piece of your personal information for financial gain. Usually, victims know when their identity has been stolen when they are contacted by a collection agency over past due accounts they never knew they had or they receive significant charges on a credit card bill for purchases they never made. Sometimes, they are contacted by the police after a crime is committed in their name.