[Dataloss] follow-up: Database breach investigation ongoing

[security curmudgeon]

---------- Forwarded message ----------
From: InfoSec News <alerts at infosecnews.org>

http://www.dailybruin.ucla.edu/news/2008/jan/10/database-breach-investigation-ongoing/

By Julia Erlandson,
Daily Bruin senior staff
January 10, 2008

One year after a breach of a university database compromised students 
personal information, UCLA officials say they are continuing to track the 
case and bolster security.

In December 2006, administrators alerted the campus community that a 
hacker had accessed a UCLA database containing the names and Social 
Security numbers of over 800,000 current and former students, as well as 
faculty and staff members.

Though the database did not contain students credit card or bank 
information, the hacker did appear to have accessed some Social Security 
numbers, which can be used to steal a persons identity.

An ongoing investigation has found no evidence of identity theft resulting 
from the breach, though affected students should still be vigilant, said 
Jim Davis, associate vice chancellor for information technology.

Since the incident, university officials have worked to protect students 
Social Security numbers, Davis said.

[..]