UCSF computer security breach affects 46,000 (maybe)

Stable door, horse, bolted

By Drew Cullen in San Francisco • Get more from this author

Posted in Enterprise Security, 4th April 2007 20:52 GMT

Free whitepaper – Vulnerability management buyer's checklist

A UCSF computer server containing confidential information on about 46,000 people may have been hacked into, the University warned today. And the word is "may" - UCSF (University of California, San Francisco) says that there is no evidence "at this time" that any specific information was accessed.

The server lives in the UC System-wide data center and was taken offline immediately, when "the incident" as UCSF is dubbing this, was discovered last month. It contained the names, social security numbers and bank account details of students, faculty and staff associated with UCSF or UCSF Medical Center over the last two years.

UCSF is contacting people on the list to warn them to look out for identity theft and to advise them how to protect personal information. This is a bit rich, considering it was UCSF that failed to protect the personal information in the first place.

The University and the University of California Office of the President are investigating the incident and they are also calling on the FBI. UCSF is hiring a company to audit security procedures, and it says it will publish the findings.

Need to know more? Here is the UCSF hotline - 415-353-8100 , the email address for inquiries - isecurity@ucsf.edu, and for good measure check out the advisory website here. ®

Free whitepaper – The starter PKI program