Data breach allowed students to view other students’ admission files, sensitive personal data

guest · Feb 15, 2019

Data breach allowed students to view other students’ admission files, sensitive personal data
Tweaking a URL for requested FERPA files revealed others’ Common Application essays, transcripts with Social Security numbers and more
February 14, 2019
https://www.stanforddaily.com/2019/...ents-admission-files-sensitive-personal-data/

Accessible documents contained sensitive personal information including, for some students, Social Security numbers. Other obtainable data included students’ ethnicity, legacy status, home address, citizenship status, criminal status, standardized test scores, personal essays and whether they applied for financial aid. Official standardized test score reports were also accessible.

Students’ documents were not searchable by name, but were instead made accessible by changing a numeric ID in a URL.

“We regret this vulnerability in our system and apologize to those whose records were inappropriately viewed,” Hayward wrote in an email to The Daily. “We have worked to remedy the situation as quickly as possible and will continue working to better protect our systems and data.”
Click to expand...

Log in or Sign up

Data breach allowed students to view other students’ admission files, sensitive personal data

guest Guest

Log in or Sign up

Data breach allowed students to view other students’ admission files, sensitive personal data

guest Guest

Useful Searches