A breach in an Oklahoma State University computer server exposed names, addresses and Social Security numbers of about 70,000 students, staff and faculty who bought parking and transit services permits in the past six years.
OSU announced the breach and began notifying permit holders today, even though it was discovered in March. The server was shut down at that time and Social Security numbers removed from the site.
After a two-month investigation, OSU officials say they think an intruder's purpose was to use the server for storage and bandwidth capacity to distribute illegal content but they can't rule out that student information was accessed.
OSU spokesman Gary Shutt said no fraud has been reported but permit buyers should monitor their bills and financial transactions to make sure their accounts are accurate. If fraud is suspected, they should contact their financial institutions and OSU.