Former East Carolina U. Prof. Posts Info of 736 Students Online
FOR IMMEDIATE RELEASE: February 8, 2008Media Contact: Aaron Titus
(202) 669-2969
GREENVILLE, North Carolina. On March 16, 2005 former East Carolina University math instructor Ken Butler made a temporary backup of his computer to his personal website, www.ropehouse.com. He didn't delete the files until January 3, 2008 when the Liberty Coalition informed him that his backed-up files included the personal information of 736 students, including 412 social security numbers, in more than 60 files. Although he knew that his students' information was backed up online, Mr. Butler believed that search engines would never find them, since he did not link directly to any of the files.
The posted files also include students' grades, e-mail addresses. Much of the information in these files is protected by FERPA, and many of these students are at extreme risk of identity theft. Although the Liberty Coalition did not find names and social security numbers directly on ECU servers, it is alarming how so much sensitive student personal information escaped the stewardship of East Carolina University, and ended up on a private website.
While it is unclear how Google "found" the files, many people do not realize that many popular search engine toolbars act as mini "spiders" for Google when certain features are turned on. Essentially, the toolbars can report the URL of every link you visit back to the search engine, so simply by visiting a website, users can inadvertently alert Google (or other search engine) to its presence.
Individuals affected by this exposure should immediately visit www.nationalidwatch.org and search for their names, to confirm what types of personal information were exposed. NationalIDWatch.org has a list of recommended steps victims should take.
About NationalIDWatch.org
National ID Watch is a search engine for personal information breaches. Sponsored by the Washington, DC non-profit Liberty Coalition, NationalIDWatch.org provides more than a million free personalized Identity Exposure Reports™ as a public service.
Each Identity Exposure Report (IXR) documents what types of personal information were exposed (such as Social Security Numbers, Birth Dates, Addresses, etc.), without revealing them. Each IXR also details the situation surrounding each exposure, and contact information of those responsible for the breach. Armed with this information, victims can further investigate, take action, or correct harm.