Duke University School of Law Information Breached

13 Views
12/11/07
Those whose numbers may have been seen were prospective applicants to Duke Law who were seeking information about the school. However, when a Duke website editor discovered "unauthorized broken links" on the site, school officials immediately took the links down and shut down the site.



"We have no evidence that the intruders actually downloaded or acquired any of this information," wrote the law school's associate dean of admissions, William J. Hoye, in an email. "Nonetheless, we know they had the opportunity and the tools to do so."

An investigation shows that the hackers may have attacked the site in early November and on Thanksgiving Day, said Duke spokeswoman Melinda Vaughn. She also said that the hackers broke into the site "through a vulnerability in third-party blog software used on the site."

Now, along with contacting the 1,400 of the incident, the school is warning them to watch their credit so they can protect themselves against identity theft.

But there's more. The hackers were not only able to view the database of prospective students and their Social Security numbers, but they were also able to view another database of current students, which included information such as home addresses, phone numbers, email addresses, and passwords. The number of students affected by this breach totaled 1,800. The school, worried that the passwords may allow hackers access to students' bank accounts, is advising the 1,800 to change their passwords.

"The security and safety of our community is of utmost importance to us, and Duke University works hard to protect the personal information of prospective students and other community members," said Hoye. "We are taking all possible steps to address this breach and prevent it from happening again. We also have notified law enforcement agencies and will notify any relevant government agencies about Duke's response."

At least, according to Jeremiah Grossman, WhiteHat Security chief technology officer, "in the case of a hack performed to improve search engine results for a particular website, intruders likely are not out to steal personal information."

Duke University School of Law, located in Durham, North Carolina, began as the Trinity College School of Law in 1868. Today, it is ranked as the 10th-best law school in the United States by U.S. News & World Report.



Featured Testimonials

I love the methodology of LawCrossing. A very well thought site, the e-mail alert being the best part.
Ann


Facts

LawCrossing Fact #208: Even if you’re not looking for a job, regularly checking LawCrossing will allow you to know where you stand in comparison to your competitors.


Location
Durham, NC
Description
Administrative Officer (Cardiology, Dermatology, Endocrinology and Infectious Disease) – GS-0341-0...
Apply now  
Location
San Francisco, CA
Description
Legal Secretary - Family Law The candidate will be answering incoming calls in a timely and profess...
Apply now  
Location
San Francisco, CA
Description
Paralegal - Family Law The candidate will be answering incoming calls in a timely and professional ...
Apply now  
 

NOW TRENDING ON BCG ATTORNEY SEARCH

MOST POPULAR ARTICLES

Testimonial of the Week

LawCrossing has the most listings of any job board I have used. It's actually a great site. The website had a lot of detail. It’s nice that you don't have to go through a recruiter if you don't want to. You can actually contact the law firm directly for the positions listed. LawCrossing had a ton of great features.
  • Brian McMillan San Francisco, CA
Job of the Day

ERISA Employee Benefits Attorney in Neenah, WI

Neenah, WI

Employment Practices Counsel Duties: Collaborate with a variety of teams, people and cultures as you navigate through t...

Employer: Plexus Corp.

Job Search Tip

Always send your cover letter and resume to the person who can hire you. Bypass personnel at all costs. They're a screening mechanism. Go to the top if you want results.