Daytona State College was hit with two data breaches this month that affected both employee and student data.
Officials launched an investigation into the first breach, which may have compromised the information of current and former employees, on Feb 19 and said they discovered a second breach while compromised the student personal information, according to WFTV 9 News.
The initial breach involved employee W-2 forms and the second breach involved students who applied for the free application for federal student aid, or FAFSA, and compromised Social Security numbers, names, addresses, dates of birth, driver's license numbers and salary information.
The school did not give the exact number of employees that were affected in the first breach however, Channel 9 reported the school employs nearly 1,000 people and the college said the breach could have exposed hundreds of state employees.
The school also didn't release how many students were affected by the breach however, 18,040 students were enrolled as of Fall 2015 and all students from every financial backgrounds are encouraged to fill out the form.
Several students reportedly received letters from the school notifying them of the incident and offering a year of free identity protection services if they are concerned.
“We believe the incident was the result of certain insecure practices by one of our third-party vendors,” the college told SC Media in a statement. “We have identified and secured the breach. The college is alerting all potentially affected individuals whose data could have been accessed.”
The FBI and IRS are also investigating the breach and the school said it will continue to cooperate with law enforcement on the investigation into the matter.