University of Maine student information exposed

Share this article:
Hackers recently gained access to a pair of file servers containing the personal information of University of Maine students who received counseling services at the school for the past eight years.

How many victims? 4,585.

What type of personal information? Names, Social Security numbers and clinical information.

Details: Every student who sought counseling services from the school's counseling center between Aug. 8, 2002 and June 21 of this year are affected, school officials said. Currently, it is unclear whether the data was viewed or downloaded.

The university's investigation began on June 16, after counseling center staff reported having trouble obtaining files on the server. The investigation revealed that one of the servers was compromised as early as March 4. After gaining access to the initial machine, the hackers infiltrated a second server.

The Maine Legislature also announced this week that one of its websites was hacked and infected with malware, IT officials said. The site, which details the status of bills, currently remains offline.

Both incidents likely are related.

Quote: "This sort of crime is in every way, shape and form an insidious affront to the rightful privacy expectations of our students," said University of Maine's Dean of Students Robert Dana.

What was the response? University of Maine police are leading an investigation into the hacking incident, along with federal prosecutors and computer crimes experts from the U.S. Secret Service. Affected individuals will receive a one-year subscription for credit monitoring services. In addition, the school is taking additional but unspecified steps to prevent future breaches.

Source:, The Maine Public Broadcasting Network, “Hackers Compromise UMaine Servers, Legislative Web site,” June 29, 2010.

Share this article:

Next Article in The Data Breach Blog

Sign up to our newsletters


More in The Data Breach Blog

Second burglary breach within a month for Coordinated Health

More than 700 Pennsylvania patients have been impacted after Coordinated Health experienced its second burglary-related data breach within a month.

Fate of unencrypted drive unknown, PHI of 5,500 in Virginia at risk

A Virginia-based chiropractic center is not quite sure what happened to an unencrypted thumb drive, which contained personal information - including Social Security numbers - on more than 5,500 patients.

Iowa State server breach exposes SSNs of nearly 30,000

The breach impacts Iowa State students where were enrolled at the university between 1995 and 2012.