Massive security breach at UCLA
608365
Details on 800,000 may have been exposed UCLA has warned 800,000 current and former students that their personal details might have been exposed to a hacker who broke into the university's computer systems. Staff members are also affected by what's being described as one of the biggest information disclosure breaches on record.â¦
220329
LOS ANGELES -- California university officials have warned nearly 600,000 students and faculty that they might be exposed to identity theft following incidents where computer hard drives loaded with their private information were lost or hacked into.
688074
The FBI is investigating the penetration of a university research system that housed sensitive personal data on a staggering 1.4m Californians who participated in a state social program, officials said on Tuesday.
109036
The University of California, Los Angeles, reports one or more computer hackers have accessed a database containing the personal information of 800,000 people.  The school said the central campus database was accessed between October 2005 and Nov.
647842
By GARY GENTILE LOS ANGELES - Universities have become attractive targets for hackers who are taking advantage of the openness of the schools' networks, their decentralized security and the personal information they keep on millions of young adults.
356667
BERKELEY, Calif.) - The personal information of more than a (m) million Californians may have fallen into the hands of a computer hacker.
489685
Word of the ambush attack inside a lecture hall at Northern Illinois University on Thursday sent panic throughout the sprawling campus.
763666
Hackers took advantage of a known vulnerability on an unpatched computer to potentially gain access to some 1.4 million names, Social Security numbers, telephone numbers, addresses and dates of birth at University of California at Berkeley, officials said
199146
By Holly K. Hacker, The Dallas Morning News  Dec. 14--The University of Texas at Dallas said Wednesday that more people may be affected by a computer attack than first believed, raising the total to 6,000 current and former students, faculty, staff and others.
252318
Hackers attacked the computer network at the Naval War College in Newport, taking down the school's network for more than two weeks, including some e-mail services and the college's Web site.
50197
RICHARDSON, Texas - Hackers might have obtained the personal information of 6,000 people who worked for, applied to or attended the University of Texas at Dallas, school officials said Wednesday.  The information includes names and Social Security numbers, the school said.
283682
A computer hacker apparently broke into a database, leaving 32,000 people uncertain whether their finances or identities might be compromised.
728518
A computer hacker accessed names and Social Security numbers of about 1.4 million Californians after breaking into a computer system at the University of California, Berkeley in August.
32812
(InfoWorld) - An unpatched flaw in a Symantec anti-virus management console resulted in the compromise of a server containing the names and Social Security numbers of nearly 45,000 students at the University of Colorado at Boulder. The students, enrolled at the university from 2002 to present, are presently being notified about a potential compromise of their information as a result of the breach, according to a statement posted on the school's Web site. The breached server belonged to the Academic Advising Center of the University's College of Arts and Science. According to Dan Jones, director for campus IT security, the intrusion was discovered May 12 by the university's security staff when the compromised server started scanning other Internet-connected systems, including those on campus, for the same Symantec flaw. The vulnerability in question was a previously disclosed flaw for which Symantec had already issued a patch, but which the Advising Center had not applied. It is not clear if the compromised server had been infected by another similarly infected system or had been deliberately broken into, Jones said. None of data on the system appears to have been compromised in the incident but the university is alerting affected individuals all the same in keeping with its notification policy, Jones said. He added that no other servers appear to have been infected. The infected server was taken offline following the discovery of the breach, and all applications needed by the Advising Center were brought up on another server that is being managed by the university's central IT organization, Jones said. Measures are also underway to bring all IT operations at the Arts and Sciences Advising Center under the control of the central IT department, Jones said. The move is part of a broader effort under which distributed IT operations across campus are being centralized, he added. In addition, the university is continuing with its efforts to purge Social Security numbers from all CU-Boulder computers in all departments. The university is also making available new host intrusion-detection software to campus IT administrators, according to a statement on the school's Web site.
574935
One of Harvard University&#39;s Web sites appeared on Monday to have been hacked, with its contents appearing on the BitTorrent file-sharing network.A compressed 125MB file claiming to be the database for the Web site of Harvard&#39;s Graduate School of Arts and Sciences is available via the BitTorrent peer to peer network. The file is listed on The Pirate Bay, a Web site that indexes torrents, or small information files that coordinate the download of content from other users on BitTorrent.The Web site for the Graduate School of Arts and Sciences was offline on Monday.A note attached to the torrent claimed the file contained a backup of the site -- including some contacts files and other files associated with Joomla, an open-source content management system -- along with other various bits. It appears to be legitimate.The note&#39;s writer claims the stunt is intended to demonstrate the insecurity of Harvard&#39;s server. The writer also exposed what purport to be usernames and passwords belonging to two of the site&#39;s system administrators.&quot;Stupid people, you don&#39;t use a secure password,&quot; read a note preceding the sensitive information.As of Monday afternoon, the compromised file was being distributed by 11 users -- known in file-sharing terminology as &quot;seeders&quot; -- and was being downloaded by nine &quot;leechers,&quot; or those downloading the files.Harvard&#39;s media office was closed on Monday due to a national U.S. holiday.
436053
COLLEGE PARK, Md., Feb. 6  /PRNewswire/ -- Are hackers trying to get into your computer right now? And what are they up to? A study by the University of Maryland's A.
612363
(InfoWorld) - Computers belonging to the U.S. government, contractors, and companies in the transportation industry were hit by a targeted computer attack in July that yielded password information for hundreds of Internet and intranet Web sites, a computer security vendor said Tuesday. The malicious code behind the attacks was first detected by computer intrusion prevention vendor Prevx on July 5. In total, the criminals were able to cull 200MB ofÂ information from about 500 computers, including password and login data, Prevx said. All but one of the computers was located in the U.S., and many of the computers that were infected were associated with air transportation, according to Mel Morris, CEO of Prevx. "This was a well-coordinated attack by someone wanting to get information on the related sites." PCs at the U.S. Department of Transportation (DOT), American Airlines, and DOT contractor Booz Allen Hamilton all were compromised, Morris said. If DOT systems were compromised, the department is unaware of the situation. "We haven't found any record of a problem," a DOT spokeswoman said Tuesday. Prevx obtained a sample of the Trojan used in the attacks on Friday of last week. By Saturday, it had tracked down a Web site, hosted by YahooÂ in Sunnyvale, California, where information from the compromised PCs was dropped. Because Prevx found a "massive amount" of job applications on the Web site used by the criminals, the company believes that victims may have downloaded the malicious software while thinking they were applying for a job. That Web site, which had probably been hacked by the criminals behind the scam, was shut down on Tuesday, Morris said. It hosted about 200MB of password information, and log-files on the server showed the IP addresses of the infected PCs. Victims of the Trojan, called Win32.PSWSteal.Gen , are told that their hard drive has been encrypted and that they will need to pay $300 to for a decryption tool. Morris believes this extortion threat is actually a ruse designed to conceal the attacker's true motivation: data gathering. "We think the ransomware is to point anyone investigating this down the wrong alley," he said. Morris said he is troubled that such a high percentage of the infected PCs are related to the transportation sector, which has been the target of terrorist attacks. "When we reverse-engineered the IP addresses of those computers, we couldn't believe that this was a daisy chain that led to government-associated sites and to other defense contractors, and to American Airlines," Morris said. "This was a very highly targeted attack." Criminals have increasingly turned to this type of targeted attack in order to collect and eventually sell data from corporations and government agencies, said Marcus Sachs, deputy director of research group SRI International's Computer Science Laboratory. But while Prevx's list of compromised organizations is "kind of scary," it's still hard to characterize what was motivating the attack, Sachs said. "I wouldn't necessarily associate it with terrorists," he said.