UNC data leak exposes more than 1,000 Social Security numbers
Local NewsUNC data leak exposes more than 1,000 Social Security numbersThe University of North Carolina at Chapel Hill knew there was a problem on Jan. 30, but it took about a month to notify the people impacted.
Posted 4:54 p.m. Mar 10 — Updated 8:59 p.m. Mar 10NO TITLE PROVIDEDBy Joe Fisher, WRAL reporterCHAPEL HILL, N.C. — “Human error” played a role in the recent data leak at the University of North Carolina at Chapel Hill has exposed more than 1,000 Social Security numbers.UNC said 1,025 people had their personal information mailed incorrectly. The university mistakenly sent out IRS Form 1099s with names, addresses, social security numbers, or tax identification number to the wrong people.
"While 3,403 forms were printed correctly, only 2,214 envelopes were mailed. Upon further investigation, the University determined that due to human error and a processing issue, some of the 2,214 mailings included more than one IRS form," said Query.AI Chief Information Security Officer Neal Bridges.
UNC discovered the error five days later, on Jan. 30, but those affected were notified until Feb. 28.
When asked about the delay in reporting, UNC said:
"The University is deeply committed to protecting the privacy, security, and confidentiality of the information they maintain and worked hard to notify those impacted as quickly as possible. When the University learned of the incident, it began an investigation and retained a vendor to assist with issuing the notification letters as well as offering free 12 months of Triple Bureau credit monitoring, CyberScan dark web monitoring, a $1,000,000 insurance reimbursement policy, and fully managed identity theft recovery services."
Bridges, a cybersecurity expert with 30 years of experience, discussed the risk of a person's identity being compromised.
"The risk is that personal data can be used to compromise your identity or personal information and ultimately lead to some form of bank, IRS, or any other form of fraud out there," Bridges said.
UNC said it would offer credit monitoring and a year of identity theft protection to those affected by the leak at no cost.
In a statement, the university wrote:
"We deeply regret any concern or inconvenience this incident may have caused. In response to the incident, the University implemented updated processes, technical improvements and employee training to help prevent something like this from happening again."
5 On Your Side: How to protect yourself if your information is compromised on the dark webExperts say that on top of monitoring credit closely, it's a good idea to file a police report to provide proof if you're a victim of a data leak.
"This is a very standard practice for companies, but it's not sufficient in terms of any form of long-term protection,” Bridges said. “It is ultimately the consumer's responsibility to maintain watch of their finances after this period ends."
The university said that as of Friday afternoon, there is no indication that any sensitive information has been misused.
1 / 2show captionsZoom InSuggest A CorrectionMore On ThisUNC data leak exposes more than 1,000 Social Security numbers2:485 On Your Side: How to protect yourself if your information is compromised on the dark webWakeMed notifies patients: Private medical data may have been sent to FacebookRelated TopicsSocial Securitydata breachdata securityUNCeducation• CreditsJoe Fisher, ReporterMark Bergin, Web EditorCopyright 2023 by Capitol Broadcasting Company. All rights reserved. This material may not be published, broadcast, rewritten or redistributed.
Trending2023 NCAA Tournament: Duke takes on Oral Roberts, NC State plays Creighton on FridayNCAA women's basketball tournament: Here's when Duke, UNC and NC State playUNC's season over as preseason No. 1 left out of NCAA field, declines NIT bidWife sues over meteorologist's death in NC helicopter crashWith rehearings, NC Supreme Court could set extraordinary precedent with political consequencesVideoswatch · 2:55WRAL WeatherCenter Forecastwatch · 1:27Evening Pick 3 Pick 4 and Cash 5watch · 56:06WRAL Sports+ Selection Sunday Specialwatch · 1:22Daytime Pick 3 and Pick 4 Drawingwatch · 1:46:40Live footage of snow falling in Zebulon
Posted 4:54 p.m. Mar 10 — Updated 8:59 p.m. Mar 10NO TITLE PROVIDEDBy Joe Fisher, WRAL reporterCHAPEL HILL, N.C. — “Human error” played a role in the recent data leak at the University of North Carolina at Chapel Hill has exposed more than 1,000 Social Security numbers.UNC said 1,025 people had their personal information mailed incorrectly. The university mistakenly sent out IRS Form 1099s with names, addresses, social security numbers, or tax identification number to the wrong people.
"While 3,403 forms were printed correctly, only 2,214 envelopes were mailed. Upon further investigation, the University determined that due to human error and a processing issue, some of the 2,214 mailings included more than one IRS form," said Query.AI Chief Information Security Officer Neal Bridges.
UNC discovered the error five days later, on Jan. 30, but those affected were notified until Feb. 28.
When asked about the delay in reporting, UNC said:
"The University is deeply committed to protecting the privacy, security, and confidentiality of the information they maintain and worked hard to notify those impacted as quickly as possible. When the University learned of the incident, it began an investigation and retained a vendor to assist with issuing the notification letters as well as offering free 12 months of Triple Bureau credit monitoring, CyberScan dark web monitoring, a $1,000,000 insurance reimbursement policy, and fully managed identity theft recovery services."
Bridges, a cybersecurity expert with 30 years of experience, discussed the risk of a person's identity being compromised.
"The risk is that personal data can be used to compromise your identity or personal information and ultimately lead to some form of bank, IRS, or any other form of fraud out there," Bridges said.
UNC said it would offer credit monitoring and a year of identity theft protection to those affected by the leak at no cost.
In a statement, the university wrote:
"We deeply regret any concern or inconvenience this incident may have caused. In response to the incident, the University implemented updated processes, technical improvements and employee training to help prevent something like this from happening again."
5 On Your Side: How to protect yourself if your information is compromised on the dark webExperts say that on top of monitoring credit closely, it's a good idea to file a police report to provide proof if you're a victim of a data leak.
"This is a very standard practice for companies, but it's not sufficient in terms of any form of long-term protection,” Bridges said. “It is ultimately the consumer's responsibility to maintain watch of their finances after this period ends."
The university said that as of Friday afternoon, there is no indication that any sensitive information has been misused.
1 / 2show captionsZoom InSuggest A CorrectionMore On ThisUNC data leak exposes more than 1,000 Social Security numbers2:485 On Your Side: How to protect yourself if your information is compromised on the dark webWakeMed notifies patients: Private medical data may have been sent to FacebookRelated TopicsSocial Securitydata breachdata securityUNCeducation• CreditsJoe Fisher, ReporterMark Bergin, Web EditorCopyright 2023 by Capitol Broadcasting Company. All rights reserved. This material may not be published, broadcast, rewritten or redistributed.
Trending2023 NCAA Tournament: Duke takes on Oral Roberts, NC State plays Creighton on FridayNCAA women's basketball tournament: Here's when Duke, UNC and NC State playUNC's season over as preseason No. 1 left out of NCAA field, declines NIT bidWife sues over meteorologist's death in NC helicopter crashWith rehearings, NC Supreme Court could set extraordinary precedent with political consequencesVideoswatch · 2:55WRAL WeatherCenter Forecastwatch · 1:27Evening Pick 3 Pick 4 and Cash 5watch · 56:06WRAL Sports+ Selection Sunday Specialwatch · 1:22Daytime Pick 3 and Pick 4 Drawingwatch · 1:46:40Live footage of snow falling in Zebulon
