The University of Michigan reported a data breach after hackers breached its network in August. Unfortunately, it appears that many people are affected, as the attackers were able to gain access to systems containing information belonging to students, applicants, alumni, donors, employees, patients and research participants.
The unauthorized access lasted five days, from August 23 to 27, and the data exposed included personal, financial, and medical information.
University of Michigan: Cyberattack
“This notice is to inform you of an incident involving unauthorized access to personal information maintained by the University of Michigan,” the notice initially states.
See also: City of Philadelphia: Revealed data breach after 5 months
After detecting suspicious activity in August, the University isolated its campus network from the internet to stop the spread of the attack.
Cybersecurity experts launched an investigation and concluded that in addition to personal data, medical and financial information.
The information exposed in this data breach, which affects students, applicants, alumni, donors, employees, and contractors, is:
- Social Security Number
- Driver's license or other government-issued identification number
- Financial account or payment card number
- Health information
Data belonging to participants in research studies and patients of the University Health Service and the School of Dentistry may also have been affected:
- Demographic information (e.g. social security number, driver's license or ID number)
- Financial information (e.g., account or payment card number or health insurance information)
- Clinical information (e.g. medical record number or diagnosis or treatment or medication history)
- Information about participating in certain surveys
All affected individuals have been notified of the data via letters (some of the letters may take a few days to reach their destination).
See also: Casio: Data breach affects customers from 149 countries
After the incident was discovered in August, the University of Michigan disclosed it and enforced password resets for accounts on computer .
In recent weeks, the University of Michigan has been bearing the brunt of this cyberattack. The incident raises concerns about individual privacy and protection data
The attackers, using surprisingly sophisticated techniques, managed to breach the University's security systems and gain access to sensitive information.
Cybersecurity in education is a challenge, and academic institutions continue to be targeted by attackers. National and international authorities are currently working with the University of Michigan to assess the extent of the damage and develop effective response strategies.
See also: D-Link: Phishing attack led to data breach
Although the disclosure of the security breach left a sense of disruption and widespread concern, University of Michigan representatives said they are committed to strengthening cybersecurity and protecting the privacy of those involved.
Source: www.bleepingcomputer.com
