Student aid records exposed in Internet security breach

by Tina Kells | September 9, 2008 at 09:58 am
275 views | 0 Recommendations | 1 comment

The privacy of 90 post-secondary students has been compromised in a security breech of a student aid records database at Memorial University in St. John's, Newfoundland.  The security breech was detected after students using an online form reported that they could see data from other applicants in some fields.

"They may have seen the financial information of a spouse, or parents, so it could include tax information, such as your income, your annual income or your social insurance number," Burke told reporters.

The Royal Newfoundland Constabulary is investigating the breach, Burke said. The office of the province's information and privacy commissioner is also investigating.

So far, authorities have traced the source of the breach to a single IP address, but it's not known whether one individual tapped into the database. Burke said authorities also don't know whether the motive was curiosity, or something worse.

"Whether they did it maliciously or found out by mistake or tried to correct something, I can't speak for that," she said.


At risk data includes the names, birth dates, addresses, income and taxation information, and social insurance numbers of students who have applied for student aid.  Signature forms from both parents and students were also accessed in the breech.

Memorial University immediately addressed the issue, removing the site and hiring an independent contractor to manage the replacement.  Students have been assured that the issue is under control and that security has been restored.  Police continue to investigate.



recommend This comment thread is now closed
0
Yuliya Talmazan

Good find. This is really scary, considering how much private information government makes us disclose for a student aid/ loan application. 

This story was created over 3 months ago, the comment thread is now closed.

closeSign in to NowPublic

is reporting from