Through their lawyers, Nova Southeastern University (NSU) in Texas notified the New Hampshire Attorney General’s Office that they learned of a data security incident that involved potential access to a server that contained former law students’ personal information, including names, dates of birth, postal and email addresses, telephone numbers, NSU identification numbers, and Social Security numbers.
On October 7, NSU confirmed that some students’ information may have been accessed by an unauthorized person or persons during the spring of 2013. A limited number of former NSU law students’ data were posted on Pastebin. NSU’s investigation connected the Pastebin data to an NSU server that was taken out of service in July 2013. Social Security numbers, dates of birth, addresses, and telephone numbers were not included on the Internet site.
DataBreaches.net determined that the paste has since been removed, but an index of the paste indicates that it had been an SQL attack by GreXPaRTa against IP 137.42.13.168 with the data dump posted on February 4, 2014. So the data were hacked in spring 2013 and dumped on February 4, 2014, but NSU did not know about this before October, it seems.
Letters sent to those affected offered them one year of free credit monitoring with Experian ProtectMyID.
NSU did not inform the NH AG how many students were notified in total.
Correction: This post originally misidentified NSU as being in Texas. It is in Florida.
NSU is actually based out of Fort Lauderdale, FL.
Thanks, Keith. I stupidly picked up the location of the law firm reporting the breach for them instead of their location. Fixed it now.
Thanks to Keith and all of you who make these data breach issues known and keep them live. For people like me, we’re not really interested… until it happen us! Thanks all.
Thanks to Dissent and others of you who make these data breach issues known and keep them live.
For people like me, we’re not really interested… until it happen to us… very many thanks!!
You’re welcome. I’m no longer surprised when people show up shrieking, although I do sometimes think, “Where have you been for the past decade while I’ve been trying to shove this stuff under your noses so that you’ll insist Congress take action to protect consumer info better!”