[Dataloss] Improper access to student PII granted, 60 mil exposed

B.K. DeLong bkdelong at pobox.com
Tue Apr 17 18:11:57 UTC 2007


Interesting. This sounds like the Lexis/Nexis case where someone got illicit
access to a law enforcement privileged account to the service by backdooring
the computer thus essentially getting access to a huge amount of data
unchecked.

On 4/17/07, Chris Walsh <cwalsh at cwalsh.org> wrote:
>
> Report: Lenders illicitly accessing student database
> Published: 2007-04-16
>
> A database containing the personal and financial details of nearly 60
> million students had repeatedly been accessed by some lending companies in
> ways the violated federal privacy laws, the Washington Post reported on
> Sunday




-- 
B.K. DeLong (K3GRN)
bkdelong at pobox.com
+1.617.797.8471

http://www.wkdelong.org                    Son.
http://www.ianetsec.com                    Work.
http://www.bostonredcross.org             Volunteer.
http://www.carolingia.eastkingdom.org   Service.
http://bkdelong.livejournal.com             Play.


PGP Fingerprint:
38D4 D4D4 5819 8667 DFD5  A62D AF61 15FF 297D 67FE

FOAF:
http://foaf.brain-stream.org
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://attrition.org/pipermail/dataloss/attachments/20070417/06996956/attachment-0001.html 


More information about the Dataloss mailing list