This incident has 0 proposed changes. Know of details that have changed? Submit them Showing Incident 1568

SUMMARY

Names, Social Security numbers and grades of students exposed on website
Records	45
Record Types	SSN NAA MISC
Breach Type	Web
Data Family	Electronic
Source	Outside
Organization	Kansas State University
Other Organizations	None
Lawsuit?	NO/UNKNOWN
Data Recovered?	NO/UNKNOWN
Arrest?	NO/UNKNOWN
Submitted By:	d2d

TIMELINE

Date	Event
None. Add Data	Incident Occurred
New Timeline Item For Incident Occurred Date Reference URL Spam Check: (type the code from the image)
2009-01-21	Incident Discovered By Organization
New Timeline Item For Incident Discovered By Organization Date Reference URL Spam Check: (type the code from the image)
2009-01-30	Organization Reports Incident
New Timeline Item For Organization Reports Incident Date Reference URL Spam Check: (type the code from the image)
None. Add Data	Organization Mails Notifications
New Timeline Item For Organization Mails Notifications Date Reference URL Spam Check: (type the code from the image)
None. Add Data	Records Recovered
New Timeline Item For Records Recovered Date Reference URL Spam Check: (type the code from the image)
None. Add Data	Lawsuit Filed
New Timeline Item For Lawsuit Filed Date Reference URL Spam Check: (type the code from the image)
None. Add Data	Arrest Made
New Timeline Item For Arrest Made Date Reference URL Spam Check: (type the code from the image)

SIMILAR INCIDENTS

records	date	organizations
56	2007-04-12	Black Hills State University
80	2007-04-12	University of Pittsburgh Medical Center
111	2007-09-10	Purdue University
128	2007-11-16	Kansas State University

MAP OF INCIDENT LOCATION

Address: Manhattan, KS, USA
Have a better address for this incident? Suggest it!

suggest a new reference

REFERENCES

suggest a new attachment

ATTACHMENTS

COMMENTS

by Anonymous on 2009-01-30 (about 1 year ago)

How is this incident any different than a state or local government making recorded documents available online to the general public? One is legal the other is not, but the risk to the public is the same. You should consider reporting those as threats too.

by d2d [Data Loss Maven] on 2009-01-30 (about 1 year ago)

Anonymous: We do, quite a bit:

http://datalossdb.org/search?breach_type%5B%5D=Web&direction=desc&order=reported_date&org_type%5B%5D=Gov

Incidents:

Data Types:

Sectors:

Sources:

Breach Types:

Disposal Computer | Disposal Document | Disposal Tape | Disposal Drive
Email | Fraud Se | Hack | Lost Computer
Lost Document | Lost Drive | Lost Laptop | Lost Media
Lost Tape | Missing Laptop | Snail Mail | Stolen Computer
Stolen Document | Stolen Drive | Stolen Laptop | Stolen Media
Stolen Tape | Unknown | Virus | Web