Four computer files containing more than 100 social security numbers of former students were accessible on a college Web site until November, university officials confirmed Friday.
The files were there since an unclear time between 2000 and 2004, according to a researcher from the Liberty Coalition who discovered the files.
Aaron Titus, a researcher with the Liberty Coalition accessed the files on the Warner College of Natural Resources (WCNS) Web site and notified CSU that they were available on Nov. 19. When informed of the problem, Academic Computer and Networking Services (ACNS) promptly deleted the files from the site.
CSU immediately contacted the students who were affected by the breach, and none of them reported identity theft, said university spokesperson Dell Rae Moellenberg.
Social Security Numbers were used as student identification numbers at the time the files were created for the purpose of recording the students’ grades, WCNS professors said Friday.
CSU came into compliance with a state mandate that requires universities to issue alternative identification numbers — CSUID — in fall 2006.
The university conducts Social Security Number purges on all university Web sites regularly and has systems in place to ensure student privacy, Moellenberg said. Those systems have been under review since the university became aware of the incident.
Information Technology professionals with ACNS said the files were mistakenly placed on the WCNS Web site when the college restructured the site.
The files also contained other sensitive information, including college usernames and passwords.
News Editor Aaron Hedge can be reached at firstname.lastname@example.org.