Information Security News: Hacker Gets Access To ISU Alumni Information

[InfoSec News <isn () c4i org>]

http://www.theiowachannel.com/technology/4746729/detail.html

July 20, 2005

AMES, Iowa -- The Iowa State University is sending out a warning to
alumni Wednesday after a hacker had access to the alumnae association
Web site.

A computer at Iowa State University's Alumni Association was hacked
into, allowing outside access to thousands of Social Security numbers
and pages of credit card information.

"It's becoming easier to attack systems with tools available on the
Web," said Jim Davis of ISU's information technology department.

University officials are still unsure whether the hacker accessed the
computer in search of the sensitive information. But they are saying
it is possible that data was accessed and has been misused.

By tapping into the computer, the hacker had access to 2,031 student
and volunteer Social Security numbers and 2,379 credit card numbers.

Kate Bruns, of the ISU Alumni Association, updates the group's Web
site, said they were able to pull up a list of everyone whose
information was on the server.

E-mail was sent out to members after the security breach was
discovered.

Those who did not receive an e-mail from the association should be OK,
NewsChannel 8 reported.

However, those with questions can call the association at (877)  
ISU-ALUM.



_________________________________________
Attend the Black Hat Briefings and
Training, Las Vegas July 23-28 - 
2,000+ international security experts, 
10 tracks, no vendor pitches.
www.blackhat.com