Various people connected to the University of Central Florida appear to be the victims of a cyber attack. The breach occurred over an extended period of time, but university officials made a public announcement about it on February 4, 2016. An estimated 63,000 Social Security numbers were stolen in the attack.
Alumni and former student government leaders Anthony Furbush and Logan Berkowitz have filed a lawsuit against the school in Orlando. The suit alleges that UCF knew of the data breach as early as December of 2015, yet officials failed to provide notification until February of the following year. Moreover, the complaint states that UCF did not adequately protect sensitive information.
This attack on UCF is one more in an ongoing stream of cyber threats occurring in schools across the country. In the past year alone, multiple attacks on the University of Maryland, Penn State University, the University of Virginia and others demonstrate that hackers are becoming more adept at their craft as well as targeting educational institutions on an increasing basis.
The current incident at UCF is being investigated by a joint task force consisting of members of UCF's own police unit along with the FBI. Reports suggest that while Social Security numbers were stolen, there is no evidence that the hackers obtained any kind of financial information.
That appears to be small comfort to people like Furbush and Berkowitz, who are now more vulnerable to identity theft. UCF mailed out letters to everyone whose information may have been compromised in the breach and a call center has been established to field further questions and concerns.
With cyber attacks on university databases on the rise, this litigation against UCF may just be the tip of the iceberg. It seems clear that more colleges and universities will find themselves the target of a hacker, and that can easily lead to a lawsuit. This only highlights the imperative nature of protecting data, which in turn protects institutions and corporations from being sued.