Confidential records breached at Florida college
Published: Wednesday, October 10, 2012 at 7:13 p.m.
Last Modified: Wednesday, October 10, 2012 at 7:13 p.m.
TALLAHASSEE — Computer hackers have accessed the confidential information of nearly 300,000 students from across the state as well as faculty and employees at a Florida Panhandle college in a massive security breach, education officials said Wednesday. They have used the information to steal the identity of at least 50 people, including Northwest Florida State College's president, authorities said.
A problem that at first involved employees at the college was much larger than suspected and now potentially involves student records from across the state, college and state officials said.
The Department of Education said hackers stole 200,000 records including names, Social Security numbers, birthdates, ethnicity and gender for any student statewide who was eligible for Florida's popular Bright Futures scholarships for the 2005-06 and 2006-07 school years.
"We speculate this was a professional, coordinated attack by one or more hackers," said Northwest Florida State College President Ty Handy in a memo that went out to employees on Monday.
Cristie Kedroski, the college vice president for university advancement, said it is standard practice for financial aid administrators to download the entire state scholarship file. She said administrators use the file when cross-checking information of students attending the school because students in Florida can be very "transient."
The hackers also stole more than 3,000 employee records, including some that contained confidential financial information such as direct deposit account numbers. Some 76,000 records containing personal identification information from current and former students at Northwest Florida State College was also hacked.
"We want to be sure that we fully understand the situation and provide accurate information to those impacted," said Florida College System Chancellor Randy Hanna in a statement. "While some of the contact information is dated, we will be trying to reach every student whose records may have been captured."
Because of the scope of the breach that occurred between late May and late September, federal authorities have joined the local and state investigation that got under way last week, said the school. The main 264-acre campus is located in Niceville, a small town near Eglin Air Force Base. The seven campuses include about 17,000 students.
Handy in his memo stated that the hackers did not get all the information from one file, but instead they were able to piece together enough data to steal identities of at least 50 employees including his.
The information has been used to either obtain loans that rely on being able to debit a personal bank account or to take out a Home Depot credit card.
"I recognize that this is a significant hassle for those whose information is used to commit identity theft," stated Handy. "I was one of the first seven or eight to be hit personally and I have spent several hours on the phone working with my bank and others to protect myself. It is not an enjoyable experience and for that I apologize."