Massive data breach at Florida college

After breaching a server at Northwest Florida State College (NFSC) in Niceville, hackers accessed the personal information of hundreds of thousands of students, as well as employees – possibly resulting in 67 incidents of identity theft.

How many victims? Nearly 300,000.

What type of personal information? Social Security numbers, bank routing numbers, dates of birth, names, ethnicities, genders and, likely, addresses, phone numbers and college email addresses.

What happened? Between May and September, a folder containing multiple files on NFSC's main server was accessed. The files included information on 76,500 current and past students, about 200,000 students throughout the state eligible for Florida's Bright Futures scholarship, and 3,000 former and current college employees.

So far, it is believed that 67 employees have fallen victim to identify theft as a result of the breach, in which scammers used victims' information to access pay-day loans and open credit card accounts. The school announced the breach on Monday.

What was the response? NFSC President Ty Handy, who was also among the employees whose information was compromised, notified victims in a letter. A web page was set up to provide details on the incident and to aid them in placing fraud alerts.

Details: The hackers reportedly took out  personal loans that allowed them to debit bank accounts through PayDayMax and Discount Advance Loans. They also fraudulently opened and charged Home Depot credit cards.

This isn't the first breach to affect NFSC. In 2010, the school was among six Florida community colleges that experienced a breach that publicly exposed the information of students and employees.

Source: miamiherald.com, The Miami Herald, Officials: Security breach contained at Northwest Florida State College,” Oct. 11, 2012.

close

Next Article in The Data Breach Blog

Advertisement

How to Prevent Insider Threats!

POLL

More in The Data Breach Blog

Hackers raid Washington state court system to steal 160,000 SSNs, 1M driver's license numbers

Hackers raid Washington state court system to steal ...

After the public website of the Washington state Administrative Office of the Courts was compromised in February, an investigation revealed the severity of the breach in April.

Personal California birth records found in "unsecure" location

The California Department of Public Health announced that the data included names, addresses, Social Security numbers, and medical information.

Investment regulator loses portable device containing personal data

Although the specifics of the lost information is unknown, the Investment Industry Regulatory Organization of Canada has announced that 52,000 clients of 32 brokerage firms have been affected.