Source: Lynn Carlin, 785-532-6520, lcarlin@k-state.edu
News release prepared by: Cheryl May, 785-532-6415, may@k-state.edu
Thursday, Nov. 15, 2007
K-STATE IDENTIFIES COMPUTER SECURITY LAPSE
MANHATTAN -- Kansas State University is notifying 128 international students in the English Language Program that their Social Security numbers were inadvertently exposed on the Internet through a K-State Web site, beginning with a routine server upgrade in November 2006 and extending for nearly a year.
University information security staff were made aware of the problem last week. All data has been removed from the Web site and steps are being taken to prevent a repeat of this situation. Although there is no evidence that any student’s personal information has been misused by identity thieves, the university is notifying the affected students of the situation and the steps they can take to protect themselves.
In addition to supporting the affected students, the university is implementing even more stringent network and server access controls and taking steps to increase faculty and staff awareness of personal information security issues.
“Most importantly, we want to increase awareness among faculty and staff of the need to be vigilant protecting personal information, including Social Security numbers, in accordance with K-State policy,” said Lynn Carlin, interim vice provost for information technology services.
"We deeply regret this incident," Carlin said. "K-State takes the protection of the personal information of our students very seriously, and we are constantly taking steps to strengthen that security, including eliminating the Social Security number as the student ID."
K-State has been phasing out the use of Social Security numbers as student identification, beginning with the elimination of these numbers from university ID cards in 2006. With the implementation of a new student system in fall 2008, the university will totally eliminate the Social Security number as the student ID.
Ken Holland, associate provost for international programs, said advisers at the International Student Center will be contacting students involved to set up an information meeting and assist with any questions. International students who have further questions regarding this matter may contact Maria Beebe, assistant director of the International Student Center, at 532-6448 or pappy@k-state.edu.
Information on preventing identity theft is available at
http://www.k-state.edu/infotech/security/topics/idtheft.html