US Yale University Sep 2010 Technical Error (Q15624)
From Open Risk Manual
A data breach risk event
| Language | Label | Description | Also known as |
|---|---|---|---|
| English | US Yale University Sep 2010 Technical Error |
A data breach risk event |
Statements
12D929E4-7D38-4B39-B190-0CB5CD2EA150
September 2010
0 references
On June 30, 2011, Yale was notified that an individual affiliated with Yale had searched his name on Google, and located and downloaded from a Yale hosted FTP server an electronic spreadsheet containing names and SSNs. Upon investigation, Yale concluded that the computer file had been stored for 10 months in a way that left the information in the file searchable using Google. Upon further investigation, Yale determined that the affected computer file was created in 1999 and was inadvertently moved to an insecure section of the computer server in July 2005. Although, from July 2005, the file was no longer fully protected from unauthorized public access, it could not be located using an ordinary internet search engine. The situation changed in September 2010, when Google modified its search (English)
