Confidential information mishandled

University improperly disposes of student, faculty data

University officials are investigating the unauthorized release of personal information and records of students, faculty and employees to local media, including the University Daily Kansan. The University Daily Kansan received two manila envelopes containing the personal information on Tuesday.

The envelopes contained fax reports, student tests, Social Security numbers, seating charts and credit applications. A cover letter from an anonymous source was attached to the documents. The letter said the information was from the mathematics department and was retrieved from recycling bins and a dumpster behind Snow Hall. The letter implicated Gloria Prothe, an employee of the department of mathematics, for not properly disposing of personal information.

Lynn Bretz, Director of University Communications, said she didn’t know how the information was leaked, but that the University’s primary concern was protecting students and preventing their information from further exposure. Bretz said the University was asking for the return of the documents to protect the students and to begin its investigation of the incident.

“This is an issue in society,” Bretz said. “We’ve all been dealing with this for the last five, six, seven years — there’s been web-hacking. People all over the country are saying ‘Better not use Social Security numbers as numbers for students at universities.’ This is a long wake-up call for everybody.”

The Kansas City Star and The Lawrence Journal-World received envelopes containing similar information.

Bretz said the investigation would be led by a team made up of officials from the Provost’s office, the dean’s office, the College of Liberal Arts and Sciences, human relations, and Jane Rosenthal, the University Privacy Coordinator and Custodian of Records. Bretz didn’t give a timeline for the investigation.

Bretz said different departments took care of personal information in different ways. Prothe said the mathematics department typically shreds personal information.

“If I considered it confidential and I didn’t shred it, I would have disposed of it in a secure manner,” Prothe said.

Prothe declined to comment further.

Bretz said University employees needed to be trained better to create a more unified system for handling confidential information. The University’s “information management initiative” is the solution for unifying the system, Bretz said. In July, a Kansan reporter recovered private information from Wescoe Hall. The materials were taken from a portion of Wescoe Hall that was under construction. The documents found included KUID numbers, course evaluations and grades.

“People have forgotten about paper,” Bretz said. “It’s not just digital; it’s paper and how they’re connected. This is a wake-up call.”

Todd Davis, CEO of Life Lock, an identity theft prevention agency, said a Social Security number could allow an identity thief to find out more information about a person such as a phone number or address. With that information in addition to a Social Security number, Davis said, a thief could pose as someone else and apply for loans or credit cards.

One of the forms in the envelope received Tuesday included one person’s credit card number, Social Security number, phone number and address on the same page. Davis said that was particularly dangerous.

“You could do something immediately,” Davis said. “You could turn that into money within minutes.”

Todd Cohen, director of University Relations, said there was no indication that this latest development was a widespread issue. He said it should not be connected to the issue in July.

“They’re totally different by nature,” Cohen said.

The two envelopes received by the Kansan contained identical information and identical cover letters. The return address listed on the envelopes delivered to the Kansan was 645 New Hampshire St., the mailing address for the Lawrence Journal-World. The envelopes delivered to the Journal-World had the return address for the Kansan. The Kansas City Star was unable to comment on its envelopes’ return addresses.

The Kansan made copies of all of the documents for use in this story. The original contents were returned to Bretz and Cohen Wednesday afternoon. All of the documents remained secured from the time they were received until they were returned. The copies also remain secured and none of the information will be shared. The copies will be returned to the University as the story is completed.

— Edited by Rachel Bock

 

Related articles

University begins investigation into record release

Leaked documents included social security cards, phone numbers, transcripts. The University was ...

/news/2007/sep/21/records/

Investigation of leaked documents underway

The University of Kansas has formed a committee to investigate the documents ...

/news/2007/oct/04/Records/

Editorial: Leak exposes irresponsibility

In light of the department of mathematics' private information leak, the Editorial ...

/news/2007/sep/21/editorial_leak_exposes_irresponsibility/

Returning leaked documents was for benefit of ...

Erick R. Schmidt, Kansan editor-in-chief, returned the documents that have spawned criticism ...

/news/2007/sep/25/returning_leaked_documents_was_benefit_university/

How personal is your personal information?

Documents left behind after construction could leave students' private records vulnerable.

/news/2007/jul/25/how_personal_your_personal_information/

Departments implement revised privacy policy

After incident last September, University has adopted new rules to protect personal ...

/news/2008/aug/27/shredders/

Officials conclude investigation on private documents

Jack Martin, deputy director of communications stresses importance of document disposal.

/news/2007/oct/09/records/

Identity theft can affect anyone

"I immediately realized something was not right," Melanie Krumsick said.

/news/2009/apr/06/identitytheft/

University warns of possible hacking

Your name, birth date, social security number and credit card number could ...

/news/2006/jan/20/hack/

Credit card scammers arrive on campus

/news/2005/aug/22/fraud/

Students fall victim to identity fraud

Several students have reported identity fraud cases to Lawrence police in recent ...

/news/2007/sep/04/students_fall_victim_identity_fraud/

Users abuse Facebook

/news/2005/feb/10/news_campus_facebook/

Personal data again left unsecured

/news/2005/dec/27/personal_data_again_left_unsecured/

CITIZEN DOLPH: A rare look at the ...

You may not recognize his name, but Dolph Simons Jr., chairman of ...

/news/2006/apr/04/dolph/

Prof. salaries cause of proposed tuition increase

Sophomores will not be affected by the change, but others may experience ...

/news/2008/jun/05/tuition/

University seeks students’ feedback

An electronic survey sent to randomly selected seniors and freshmen aims to ...

/news/2007/mar/01/survey/

Letter to the editor: Story reported insensitively

Student shares concerns about The Kansan's reporting of the death of Janet ...

/news/2010/sep/17/letter-editor-story-reported-insensitively/

Keeping personal information from cyber crime

Personal information can be accessed by hackers and thieves in an instant ...

/news/2012/jan/29/keeping-personal-information-cyber-crime/

Personal information stolen from student housing

Thieves broke in a student housing office Wednesday night, stealing former and ...

/news/2011/dec/02/personal-information-stolen-student-housing-office/

GTAs demand a vote for faculty hires

Eight GTA organizations sent a letter to the provost regarding their loss ...

/news/2007/apr/27/gta/

Speaker recommends people-first language

Salina senior Angela Lindsey-Nunn spoke about her experiences as a student with ...

/news/2007/oct/18/Conversations/

Facing the music

For 13 students sued by the music industry, the risks of illegal ...

/news/2008/apr/30/facing_music/

Response to computer security audit slow

The University has resolved few issues from the state’s 2005 audit.

/news/2009/mar/02/computers/

New book praises University's academics

/news/2005/aug/31/ne_book_praise/

FIJI faces hazing investigation for injury

The University placed Phi Gamma Delta fraternity under interim suspension after a ...

/news/2010/sep/26/fiji-faces-hazing-investigation-injury/

Editorial: Students should monitor threatening budget cuts

Students need to know how proposed cuts could affect them.

/news/2009/mar/08/editorial_students/

Demonstrators hope to stop wetland road talks

Students, locals at Strong Hall try to convince the University to preserve ...

/news/2009/nov/03/demonstrators-hope-stop-wetland-road-talks/

Perkins to receive additional $750,000

Athletics director’s scheduled retention payment for six years of service was originally ...

/news/2009/apr/16/perkins_receive/

Ombuds see increase in conflicts

The office aids resolutions in incidents between students and faculty.

/news/2009/nov/06/ombuds_conflicts/

A sobering reality

Two years after Jason Wren's death, what has changed?

/news/2011/may/11/sobering-reality/

Facebook accounts pose dangers

Incriminating information online can both endanger student security and harm future career ...

/news/2007/oct/16/facebook_accounts_pose_dangers/

University promotes students’ cyber security

KU Information Technology is encouraging students to recognize and protect themselves from ...

/news/2009/oct/21/university-promotes-cyber-security/

Personal information stolen from student residents at ...

All of the students affected by the theft have been notified, according ...

/news/2011/dec/05/personal-information-stolen-student-residents-corb/

the scarlet list

Jonathon Bourgeois doesn’t wear a visible scarlet “A” on his chest as ...

/news/2005/may/12/news_features_offenders/

Chancellor names interim provost

Joseph Steinmetz, CLAS dean, will take over as provost on July 1.

/news/2009/mar/10/interim_provost/

Phi Gamma Delta placed on probation for ...

FIJI placed on probation for hazing.

/news/2010/oct/08/phi-gamma-delta-placed-probation-two-years/

Governor wants to improve school ranking

Parkinson calls for tougher admission standards.

/news/2009/sep/10/governor_wants_improve_school_ranking/

Identity check

/news/2005/feb/16/news_lawrence_identity/

Identity fraud, viruses prompt on-campus improvements

Millions of American adults are victims of identity fraud every year, and ...

/news/2008/apr/02/identity_fraud_viruses_prompt_campus_improvements/

University e-mail accounts attacked by fake KU ...

The IT Security Office is formulating how to stop the scam e-mails, ...

/news/2008/jun/07/credit/

Comments

Why did the Kansan choose to return the paperwork back to KU officials when the other media outlets cited in the story are refusing to do so because of concerns about protecting whistleblowers? Was the Kansan obligated to do so or was this not a concern for Kansan editors?

Sign in to comment