2006 — UCLA: Oct 2005–Nov 2006, 800K records

2006 800.0K records affected

Data compromised

Names, SSNs, DOB, addresses, contact info

Technical writeup

Oct 2005–Nov 2006. Hackers exploited software vulnerability; accessed database with names, SSNs, DOB, addresses, contact info. 800k students, faculty, staff, applicants. No credit card or banking data. High-volume suspicious queries detected Nov 21. FBI investigated. Identity Alert hotline established.

Root cause

Undetected software vulnerability; unauthorized database access.

References

https://www.theregister.com/2006/12/13/ucla_hacker_breach/
https://www.nbcnews.com/id/wbna16169453