OSU investigates unauthorized access to parking and transit services server
Wednesday, May 14, 2008
(STILLWATER, OK, May 14, 2008) – Oklahoma State University announced today it is investigating
a breach of the university’s parking and transit services computer server, which was
immediately shutdown when security personnel discovered the incident. The university
is notifying people who purchased parking and transit permits over the past few years
to alert them of the incident.
OSU believes the intruder’s purpose and only action was to use the OSU server for storage capacity and bandwidth to upload and distribute illegal and inappropriate content. OSU contacted federal law enforcement authorities about the incident.
The illegal access was limited to the parking and transit server, which housed a database that contained confidential information including names, addresses and social security numbers of OSU students, faculty and staff.
Even though personal data was exposed, there is no indication any of that information has been misused or any identity theft has occurred. OSU officials have removed the confidential information from the database.
“This breakdown in security is totally unacceptable,” said OSU President Burns Hargis. “We are conducting a full review and will take whatever steps are necessary to protect our network from unauthorized access. This is a serious matter and we will deal with it aggressively. We regret the circumstances and concern this situation has caused.”
OSU recommends people who could have been affected – those people who purchased an OSU parking permit during the period of July 2002 to March 2008 – review any bills or financial transactions to make sure their accounts are accurate.
The OSU webpage, http://idalert.okstate.edu/resources.html , provides additional information and links to various helpful sites. For information about identity theft, visit http://www.ftc.gov/bcp/edu/microsites/idtheft or call 1-877-438-4334. Questions may be directed to the OSU Parking Office at 405-744-4525 or email firstname.lastname@example.org, or call 405-744-1700.