On Twitter

About this page and the author

The author of this blog, David T.S. Fraser, is a Canadian privacy lawyer who practices with the firm of McInnes Cooper. He is the author of the Physicians' Privacy Manual. He has a national and international practice advising corporations and individuals on matters related to Canadian privacy laws.

For full contact information and a brief bio, please see David's profile.

Please note that I am only able to provide legal advice to clients. I am not able to provide free legal advice. Any unsolicited information sent to David Fraser cannot be considered to be solicitor-client privileged.

Privacy Calendar

Links

RSS FEED for this site

Blogs I Follow

Small Print

The views expressed herein are solely the author's and should not be attributed to his employer or clients. Any postings on legal issues are provided as a public service, and do not constitute solicitation or provision of legal advice. The author makes no claims, promises or guarantees about the accuracy, completeness, or adequacy of the information contained herein or linked to. Nothing herein should be used as a substitute for the advice of competent counsel.

This web site is presented for informational purposes only. These materials do not constitute legal advice and do not create a solicitor-client relationship between you and David T.S. Fraser. If you are seeking specific advice related to Canadian privacy law or PIPEDA, contact the author, David T.S. Fraser.

Friday, June 03, 2005

Incident: Jackson Community College computer compromised

Students at a community college in Michigan are being notified of a potential security breach:

Students worry about breach:
"Jackson Community College officials say measures have been taken to stop hackers from accessing computers.
By Andrea Yeutter
Daily Telegram Staff Writer
A security breach in Jackson Community College's computer system may have revealed the Social Security numbers of 8,000 JCC students and employees to a hacker who broke into the system from an external source on May 18.
The compromised computer was located in the Information Technology Office, according to the college. The computer had significant administrative privileges, including access to student and employee passwords, many of which were Social Security numbers.
Prior to the breach, student and employee Social Security numbers were used as default passwords for computer and e-mail accounts. Although college officials said they encouraged students and employees to change their passwords, many continued to use their Social Security numbers until the break-in occurred...."

Labels: information breaches