FL: Nova Southeastern University law students’ data hacked in spring 2013

Through their lawyers, Nova Southeastern University (NSU) in Texas notified the New Hampshire Attorney General’s Office that they learned of a data security incident that involved potential access to a server that contained former law students’ personal information, including names, dates of birth, postal and email addresses, telephone numbers, NSU identification numbers, and Social Security numbers.

On October 7, NSU confirmed that some students’ information may have been accessed by an unauthorized person or persons during the spring of 2013.  A limited number of former NSU law students’ data were posted on Pastebin. NSU’s investigation connected the Pastebin data to an NSU server that was taken out of service in July 2013. Social Security numbers, dates of birth, addresses, and telephone numbers were not included on the Internet site.

DataBreaches.net determined that the paste has since been removed, but an index of the paste indicates that it had been an SQL attack by GreXPaRTa against IP with the data dump posted on February 4, 2014.  So the data were hacked in spring 2013 and dumped on February 4, 2014, but NSU did not know about this before October, it seems.

Letters sent to those affected offered them one year of free credit monitoring with Experian ProtectMyID.

NSU did not inform the NH AG how many students were notified in total.

Correction: This post originally misidentified NSU as being in Texas. It is in Florida.



About the author: Dissent