Many warned about Sacred Heart University computer security breach

May 24, 2006

By Annie Rourke

http://www.wtnh.com/Global/story.asp?S=4947217



A possible security breach at Sacred Heart University but is personal information at risk?

That's what some people are asking tonight after receiving a letter from Sacred Heart University stating some of their information may be at risk.

The problem is some of the people warned aren't even students at the university.

The letter turned up in some mailboxes Wednesday advising recipients that the security system of one of the university's computers may have been breeched and that things like their social security numbers may have been stolen.

However, this letter has raised many more questions than is has answered. The letter turned up in some mailboxes Wednesday advising recipients that the security system of one of the university's computers may have been breeched and that things like their social security numbers may have been stolen.

However, this letter has raised many more questions than is has answered.

The envelope is stamped confidential and the letter is addressed to alumni and friends.

But Steve Law's 18-year-old son is neither.

"He is a freshman in college, he did not apply to Sacred Heart. He wasn't even interested in it," says Law, victim's father.

And yet his name, address and social security number were on a computer at the university that has apparently been hacked into.

The letter from Michael D. Trimble, Assistant VP for Technology, states in part,"We cannot confirm that any of the sensitive files on this computer were actually accessed but we believe that the intruder had the expertise to do so."

The calls to answer their many questions and concerns have so far gone unanswered.

"My wife tried to call them today, and they took a message and the are supposed to be calling back," says Law.

News Channel 8 spoke with a representative at the school but they were unable to tell us how many people were affected or why the university would even have the information of someone not affiliated with them in any way.

Law's son is not the exception. News Channel 8 spoke with another victim with no ties to Sacred Heart who tells us that the university told him that they got his information from the College Board when he took the SATs 8 years ago.

Sacred Heart is now directing these folks back to the internet, advising them to go to the university website for answers and to contact the three credit bureaus.

That too is not going down so well.

"I do not understand why expect us to notify all these security companies. Why would they put the burden of that on us?" asks Law.

Sacred Heart has now set up a hotline number of 866-505-7979.

They say at this point they do not have any evidence that any fraud has been committed and at this stage it is just a precautionary measure.

[an error occurred while processing this directive]