Information Security Incident - January 2007

Dear Campus Community:

While troubleshooting a technical problem on staff desktop computers, the Network Security Office at California State University Dominguez Hills discovered that unauthorized computer intruders had gained illegal access to 10 desktop computers through viruses and various hacking tools.  The desktop computers contained the personal information of 2,717 people.  The University has not received any report of identity theft at this time.

In accordance with California Civil Code 1798.29, the Campus Information Security Incident Response Team (CISIRT) is sending a letter to the people whose personal information may have been on one of the desktop computers. A special Web site and a dedicated phone line have been set up to handle the requests for this information security incident. Brenda Knepper of University Communications and Public Affairs is our single point of contact for media and external inquiries about this incident. If you receive inquiries from media or external agencies, please direct them to Ms. Knepper. If you receive inquiries from students, please direct them to the security information Web site, where frequently asked questions about this incident are available, or you may direct them to the security incident phone line, 310-243-2305, where they can leave a message.

Once again, IT would like to urge the campus community not to store any confidential information on desktop or laptop computers. As demonstrated by this incident, storing any students’ or employees’ confidential information on desktop or laptop computers poses high information security risks. In addition to theft, desktop or laptop computers are subject to hacking attacks and hackers could steal the information.

The IT Help Desk regularly offers workshops and training on information security and provides tips for keeping your desktop or laptop computers secure. I encourage all of us to attend these workshops and training sessions. If you would like to arrange an information security workshop for your department or unit at a particular time on a particular day, please contact Sabrina Warrington, our help desk manager.

Thank you.