www.baltimoresun.com/business/technology/blog/bs-md-umd-data-breach-update-20140312,0,1173810.story

baltimoresun.com

UM data breach slightly smaller than thought

Nearly 30,000 sign up for credit monitoring services

By Scott Dance, The Baltimore Sun

6:18 PM EDT, March 12, 2014

Advertisement

A cyber attack at the University of Maryland, College Park, affected 21,499 fewer people than originally thought after an analysis revealed the database contained some incomplete and inaccurate data, university officials said Wednesday.

Hackers obtained records including names and Social Security numbers of 287,580 students, alumni, faculty and staff, interim Chief Information Officer Ann G. Wylie wrote in an e-mail. It was previously thought that the hacking compromised the personal information of more than 309,000 people.

Officials also said nearly 30,000 people had signed up for credit protection services the university is offering for free, despite heavy call volume making it difficult for many to get through to a hot line dedicated to the data breach. University officials said the sign-ups were running ahead of projections made based on previous major national data breaches.

The breached database held names, Social Security numbers, dates of birth and university identification numbers of students, faculty and staff who had been issued university IDs since 1992. It was originally thought that the data went back to 1998, when the database was created, but in the process of purging the database, officials found that some information dating back to 1992 had also been included, Wylie's e-mail said.

University officials have purged 78 percent of the records in the breached database, a total of more than 225,000 records, Wylie said.

sdance@baltsun.com

twitter.com/ssdance