Yale University Sued Over 2008 Data Breach

Yale University Sued Over 2008 Data Breach

In a letter to those affected by the 2008 data breach, Yale said the breach was discovered on June 16, 2018, during a security review of its servers. After the university discovered the breach, it notified those affected and offered credit monitoring services and identity theft prevention tips.

Two lawsuits have been filed in federal court against Yale University. Both lawsuits are claiming damages from a 2008 data breach at Yale, which was discovered earlier this year.

Between April 2008 and January 2009, intruders gained access to a Yale database and gathered names, Social Security numbers, dates of birth, email addresses, and in some cases, physical addresses.

In a letter to those affected by the data breach, Yale said the breach was discovered on June 16, 2018, during a security review of its servers. After the university discovered the breach, it notified those affected and offered credit monitoring services and identity theft prevention tips.

A class-action lawsuit filed this week on behalf of Andrew Mason of Virginia claims that Yale was negligent in its handling of student data and that the university was reckless and acted with “willful misconduct” as it “turned a blind eye to” possibilities of a prior data breach. It also claims that the university used unfair trade practices.

A federal lawsuit on behalf of Julie Mason of New York was filed in August. The lawsuit also claims negligence, willful misconduct, recklessness and unfair trade practices. In addition, it claims that Yale had still not notified everyone who was affected as of Aug. 1, six weeks after discovering the data breach.

The breach affected an estimated 119,000 Yale alumni, faculty and staff, according to the lawsuits. One of the lawsuits claims that the breach affected a far broader group of people than initially identified by Yale, and that Yale did not make people aware that this type of their personal data had been stored.

In its letter to those affected, Yale said that the university had deleted personal information from the affected database in 2011 as part of a data protection program, but had not detected the data breach at that time.

“Yale takes seriously the protection of personal information, and we continue to improve our electronic security and eliminate the unnecessary storage of such information,” the university’s statement to those affected read. “We very much regret this incident and the inconvenience to you.”

About the Author

Jessica Davis is the Associate Content Editor for 1105 Media.

Featured

  • Live From ISC West 2023: Day 1

    ISC West 2023 in Las Vegas, Nevada, has officially begun! Make sure to keep an eye on Security Today’s ISCW Live 2023 page, as well as our associated Twitter accounts—@SecurToday and @CampusSecur—for the latest updates from the show floor at the Venetian Expo. Read Now

    • Industry Events
    • ISC West
  • It Happened Again

    Just yesterday (as of this writing), it happened again. A 28-year-old woman shot her way into a Christian elementary school in Nashville, Tenn., on Monday and killed three children and three adults, according to national news. AP News reports that the victims were three 9-year-old children, a top school administrator, a substitute teacher, and a school custodian Read Now

  • Let's Get to Work

    You are standing at the conference center doors just waiting to get into the exhibit hall. I know you are because I’m standing next to you. This week at ISC West has been three years in the making. Last year was encouraging, and here we are waiting for the Big Show. Read Now

    • Industry Events
    • ISC West
  • Using Modern Technology

    Using Modern Technology

    Workplace violence is a serious and growing challenge for many organizations — including those in the healthcare industry. Read Now

Featured Cybersecurity

New Products

  • ComNet CNGE6FX2TX4PoE

    The ComNet cost-efficient CNGE6FX2TX4PoE is a six-port switch that offers four Gbps TX ports that support the IEEE802.3at standard and provide up to 30 watts of PoE to PDs. It also has a dedicated FX/TX combination port as well as a single FX SFP to act as an additional port or an uplink port, giving the user additional options in managing network traffic. The CNGE6FX2TX4PoE is designed for use in unconditioned environments and typically used in perimeter surveillance. 3

  • PACE® Long Range Ethernet Solutions

    PACE® Long Range Ethernet Solutions

    Altronix introduces the newest addition to its portfolio of PACE® Long Range Ethernet Solutions. 3

  • Kangaroo Home Security System

    Kangaroo Home Security System

    Kangaroo is the affordable, easy-to-install home security system designed for anyone who wants an added layer of peace of mind and protection. It has several products, ranging from the fan-favorite Doorbell Camera + Chime, to the more comprehensive Front Door Security Kit with Professional Monitoring. Regardless of the level of desired security, Kangaroo’s designed to move with consumers - wherever that next chapter may be. Motion sensors, keypads and additional features can be part of the package to any Kangaroo system in place, anytime. Additionally, Kangaroo offers scalable protection plans with a variety of benefits ranging from 24/7 professional monitoring to expanded cloud storage, coverage for damage and theft. 3