For educational institutions looking to protect their student data, cover their liability as well as add peace of mind for the individual students...



Did You Know?

  • 50% of college students receive pre-approved credit card offers in the mail daily.
  • Only 33% of college students reconcile their checkbooks each month. Without a close scrutiny of accounts, they are unlikely to spot identity theft in time.
  • 48% of college students have their grades posted by SSN.
  • Since January 2005 approximately 8 million students, faculty and staff have had their information stolen as a result of negligence on behalf of a university.

2,317,830 - That’s the number of identities involved in security breaches from colleges and universities in the U.S. in the first five months of 2008. This number is from PrivacyRights.org where they track this kind of information.i  In reality there are additional breaches, however there are many reported as unknown on the amount of information recorded as stolen. Now that doesn’t necessarily mean everyone whose personal information was stolen will actually become a victim, but it certainly puts a lot of young adults at risk through no fault of their own.

One of the problems with people in the 18-24 year old range is that they don’t give a lot of thought about checking their credit reports. We all tend to think we’re bullet-proof at that age. This gives identity thieves plenty of time to commit their crime and make a clean getaway. 

Those attending a college or university often carry around "their life" in their backpack or purse, which really increases their risk if it is stolen.

Actually, students comprise the single largest demographic (34%) of all identity theft victims. Increased amounts of credit card offers, communal living that makes information easily accessible and universities that use social security numbers as a means of identifying students are just a few of the many ways students are being put at risk.

Then there are vendors for credit card companies that set up on campuses and offer students credit cards. The applications require SSNs, date of birth, name, address - just the kind of info a thief would want. It’s possible that some vendors aren’t legitimate or the person taking the applications is also making copies. And, commonly students mistakenly assume that they don’t have anything to steal because they don’t have any money. But identity thieves aren’t always after money you may have. Instead they are after credit you have access to. University students are new credit applicants, who generally still have "clean credit" and this makes them an attractive target. Since college students generally have no more than one credit card and a student loan or two, they are prime targets for identity theft because they have clean records. And, on top of that, their identities are usually pretty easy to steal.

How can an identity theft restoration product help? 

It helps not only the university but also the student themselves.  Having a university-sponsored program will limit the institution’s liability and give the students the help they need if and when a breach occurs. Additionally it will cover students under any circumstance of an identity theft, not only taking care of the university’s data breach.

The identity theft restoration service can be included in student medical plans as an added benefit as well.  And because at least one of our vendors offers components that cover this sort of breach, it would be a good fit for the group looking to use the service in this way.  And with the ever-increasing cost of health care in the United States, medical identity theft is becoming commonplace. When someone else uses your name to obtain health benefits or prescriptions, you can lose your health coverage because of the false information in your medical record. This can haunt you for years, since medical databases are notoriously slow to update.

ID Defenders can help universities with this growing problem. See our traditional plan or commercial plan options for more details.

Here are a few examples of breaches at colleges and universities:

University:
Montana State University
Date of Loss:
Nov. 7, 2007
Size of Loss:
271
Affected Individuals:
Students and employees who lived in on-campus housing from 1998 to the spring of 2007
Geographic Focus:
Montana
Data Contained:
SSNs
Additional Notes:
On Nov. 2, it was determined that a stolen data storage device contained the SSNs of 216 students and employees. In a separate incident that also occurred on Nov. 2, an independent security analyst informed university data security staff that an Excel spreadsheet with the names and SSNs of 42 people was posted on the MSU website. University data security staff then discovered another Excel spreadsheet with the SSNs of 13 people affiliated with the Department of Computer Science on the university’s website. Both spreadsheets were immediately removed.
University:
Binghamton University
Date of Loss:
Oct. 14, 2008
Size of Loss:
56
Affected Individuals:
Students
Geographic Focus:
New York
Data Contained:
SSNs and full names
Additional Notes:
Passing a dumpster on the campus of Binghamton University a news team inadvertently stumbled upon a pile of official Binghamton university documents containing personal information. All of the files contained SSNs and full names, for 56 different people. The 91 documents (totaling almost a 150 pages) were office files from the German Department in the mid-seventies detailing classes, grades, assistant stipends and other personal information including birthdays and addresses.
University:
University of Florida
Date of Loss:
Feb. 23, 2009
Size of Loss:
101
Affected Individuals:
Students
Geographic Focus:
Florida
Data Contained:
LDAP Directory
Additional Notes:
On Tuesday, January 20, 2009, the University of Florida discovered a configuration error in its LDAP directory service that would allow anyone to query the directory for fields that are normally protected from unauthorized access. A human error was made while making changes to the directory service that created the exposure. The error was fixed immediately after it was detected and the 9 digit number field was permanently removed from the directory. Reviewing the directory logs, we discovered queries that might have returned the name and a 9 digit directory field that is the SSN for 101 users. The query response screen did not identify the 9 digit number as an SSN.

i Privacyrights.org