Mental Health Data Breached in Maine
The University of Maine is notifying 4,585 current and former students after two servers holding information from the school's mental health and support counseling center were breached.
Data on the servers, covering students who sought counseling services between Aug. 8, 2002, and June 21, 2010, includes names, Social Security numbers and clinical information. "Any student or former student who visited the counseling center as a UMaine student since Aug. 8, 2002, should assume that he or she is in the affected database," according to a statement the university has issued.
The university began an investigation on June 16 after staff members reported difficulty accessing server files. An archive server holding data from 2002 to 2005 was found to have been hacked as early as March 4. The hacker then used that server to access an active server holding all data from the past eight years.
Investigators have found no evidence that data was viewed or downloaded, according to the university. The school is offering those effected at least one year of free credit and identity theft prevention services. The university also will conduct a review to determine necessary security improvements.
For more information, click here.