Re: Internal Security Breach Costs

[Richard Gambrell <richard-gambrell () UTC EDU>]

There is the scandal at Southern University a while back:
http://www.findarticles.com/p/articles/mi_m0DXK/is_5_21/ai_n6146611
http://www.looksmartcollegesports.com/p/articles/mi_m0DXK/is_6_21/ai_n6137165

Richard

George Bailey wrote:

> As reported by SANS back in August 2005:
>
> ARRESTS, CONVICTIONS AND SENTENCES
>
> --Former University Employees Charged in Grade-Altering Scheme
>
> (19 August 2005)
>
> Ellis Peet and Clifton Franklin, both former Florida Memorial University
> employees, have been charged in connection with a grade-altering scheme.
>
> The men allegedly accepted money and favors in return for changing students'
> grades. Mr. Peet was a computer technician in the registrar's office and Mr.
> Franklin a data entry clerk. Officials believe the pair changed their own
> grades while they attended the school. According to Mr. Peet's attorney, his
> client has pleaded not guilty to racketeering and violating intellectual
> property and computer access laws. Mr.
>
> Franklin faces the same charges. In addition, three of five students who
> allegedly acted as middlemen in the scheme have been arrested and charged
> with racketeering.
>
> http://www.local10.com/news/4868830/detail.html
> <http://www.local10.com/news/4868830/detail.html>
>
>
>
> I am sure there are others.
>
>
>
> --gb
>
> ----------------------
> George Bailey
> Information Security
> Ivy Tech Community College of Indiana
> Indianapolis, Indiana
>
> PH: 317.921.4526
>
>
>
> ________________________________
>
> From: Geoff Nathan [mailto:geoffnathan () WAYNE EDU]
> Sent: Friday, November 18, 2005 2:27 PM
> To: SECURITY () LISTSERV EDUCAUSE EDU
> Subject: [SECURITY] Internal Security Breach Costs
>
>
> In preparation for presenting a data custodianship policy to the
> powers-that-be here at Wayne I'd like to find a couple of real-life examples
> of problems caused by employee access to sensitive data (it's easy to find
> reports of cases of externally hacked files).  Could anyone point me to news
> reports of internal employee misuse of sensitive data at some university?
> Many thanks,
>
> Geoff Nathan
>
> Geoffrey S. Nathan <geoffnathan () wayne edu>
> Security Policy Coordinator, Computing and Information Technology,
>         and Associate Professor of English
> Linguistics Program                       Phone Numbers
> Department of English                     Computing and Information
> Technology:  (313) 577-1259
> Wayne State University                    Linguistics (English):  (313)
> 577-8621
> Detroit, MI, 48202                        C&IT Fax: (313) 577-1338


--
Richard L Gambrell, Director of Information Systems
Information Technology Division, University of Tennessee at Chattanooga
103 Admin Dept 4054, 615 McCallie Ave, Chattanooga, TN 37403-2598
Report IT Problems: Help-Desk () utc edu or 423-425-4000
My Direct phone: 423-425-5316  IT Business Office: 423-425-1755
My Urgent/cell: 423-432-5122   Main UTC phone: 423-425-4111
Email: richard-gambrell () utc edu