Ohio University reports two security breaches

Computerworld reports that not only did 137,000 social security numbers get leaked, but the computer that was hacked, had been compromised for over a year.

On April 24, IT officials at Ohio University noticed that someone had hacked into an alumni database server containing personal and biographical information for more than 300,000 individuals and organizations, said Bill Sams, the Athens-based university’s CIO. Faculty and staff members hired by the school before January 2004 were also affected. The compromised files did not include credit card or bank information, but they did include Social Security numbers for 137,800 individuals, Sams said.

“We immediately took it off-line and got into the logs. We discovered that it had been compromised as far back as 2005,” he said. In the 13 months since the server was breached, “we have found that people have accessed it from both domestic and international IP addresses,” he said.