Computer Hacking of University Server Prompts Notification of 59,000
FOR IMMEDIATE RELEASE
March 15, 2005
CONTACT: Joe Wills
Tel: 530-898-4143
Computer Hacking of University Server Prompts Notification of 59,000
California State University, Chico is notifying more than 59,000 individuals that their personal data was on a University Housing and Food Service server that was illegally accessed by computer hackers.
While there is no indication that the hackers targeted this information or will use it for any unlawful purpose, the University is alerting those affected by e-mail and regular mail today, March 15.
The server contained personal information, including names and Social Security numbers, on current, former and prospective students, as well as current and former faculty and staff. The vast majority of students involved were new students within the past five years. The faculty and staff data was contained in a file from the Wildcat Card identification system.
The University Police Department has an ongoing investigation into the computer hacking. There is no indication at this time that the crime took place on campus or involved University personnel.
CSU, Chico has established a Web site, http://www.csuchico.edu/inf/security/03-14-2005.shtml, and a toll-free number, 877-837-7200, to answer questions about the incident. The Web site also has information available regarding identity theft.
The University discovered the hacking during routine monitoring of the network. An investigation revealed that the hackers installed software to store files, such as for movies or games, on the system and attempted to break into other computers.
As computer hacking and identity theft crimes are becoming increasingly common, CSU, Chico is taking new security measures to protect personal information. The University is developing an alternative ID system using a new randomly assigned nine-digit ID number for students and employees in place of Social Security numbers.
Unauthorized computer access is a crime under section 502 of the state penal code. It carries a penalty of up to three years in prison and fines up to $10,000.
###