Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Data Breaches

Lawsuit Accuses University of Minnesota of Not Doing Enough to Prevent Data Breach

A lawsuit filed on behalf of a former student and former employee at the University of Minnesota accuses the university of not doing enough to protect personal information from a recent data breach.

A lawsuit filed on behalf of a former student and former employee at the University of Minnesota accuses the university of not doing enough to protect personal information from a recent data breach.

Attorneys for the two plaintiffs said in the lawsuit filed in federal court Friday that the university “was fully capable of preventing” the breach, the Minneapolis Star Tribune reported Wednesday.

The university declined comment on the lawsuit but spokesperson Jake Ricker told the newspaper in an email that the safety and privacy of everyone in the university community is a top priority.

After being questioned by the Star Tribune, the university acknowledged last week that it learned July 21 “that an unauthorized party claimed to possess sensitive data allegedly taken from the University’s systems.”

The university did not specify how it learned of the issue. But also on July 21, the Cyber Express, a news site focused on cybersecurity, posted a story about a hacker’s claims to have accessed about 7 million Social Security numbers dating to 1989.

The report said the hacker gained access to the university’s data warehouse to analyze the effects of affirmative action following the U.S. Supreme Court ruling limiting the consideration of race in college admissions. The report did not say whether the hacker made demands of the university.

“First, you have to determine somebody claims something, but is there evidence that it actually is true?” the university’s interim president, Jeff Ettinger, told the Star Tribune last week.

Advertisement. Scroll to continue reading.

The FBI and the Minnesota Bureau of Criminal Apprehension are investigating.

The lawsuit was filed on behalf of Geoff Dittberner, who studied at the university and worked as a government relations office assistant there; and Mary Wint, who worked as a university nutrition educator for about 20 years and was a patient of its health care system. Attorneys are seeking class-action status.

The lawsuit accuses the university of violating the Minnesota Government Data Practices Act. It does not specify how much money the pair are seeking.

Related: Companies Increasingly Hit With Data Breach Lawsuits: Law Firm

Related: Rackspace Hit With Lawsuits Over Ransomware Attack

Related: SolarWinds Agrees to Pay $26 Million to Settle Shareholder Lawsuit Over Data Breach

Written By

Click to comment

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Join security experts as they discuss ZTNA’s untapped potential to both reduce cyber risk and empower the business.

Register

Join Microsoft and Finite State for a webinar that will introduce a new strategy for securing the software supply chain.

Register

Expert Insights

Related Content

Data Breaches

OpenAI has confirmed a ChatGPT data breach on the same day a security firm reported seeing the use of a component affected by an...

Cybercrime

Zendesk is informing customers about a data breach that started with an SMS phishing campaign targeting the company’s employees.

Data Breaches

LastPass DevOp engineer's home computer hacked and implanted with keylogging malware as part of a sustained cyberattack that exfiltrated corporate data from the cloud...

Data Breaches

A group of hackers has leaked Atlassian employee records and floorplans, information that was obtained from third-party workplace platform Envoy.

Data Breaches

GoTo said an unidentified threat actor stole encrypted backups and an encryption key for a portion of that data during a 2022 breach.

Data Breaches

AT&T is notifying millions of wireless customers that their CPNI was compromised in a data breach at a third-party vendor.

Data Breaches

KFC and Taco Bell parent company Yum Brands says personal information was compromised in a January 2023 ransomware attack.

Cybercrime

Instant Checkmate and TruthFinder have disclosed data breaches affecting a total of more than 20 million users.