News Release

  • September 5, 2014

On August 11, 2014, ÂãÁÄÖ±²¥, East Bay’s (CSUEB) information security team discovered that unauthorized access to certain personal information occurred on August 23, 2013.

The university immediately commenced an internal investigation and has since learned that an unknown third-party broke into a university web server used to store various employment transaction records and some extended learning course information. The malicious files have been removed from the server and vulnerabilities have been mitigated.

While a full investigation is continuing by CSUEB’s information security team, it has been determined that the malicious software tool allowed the unauthorized party to copy a data file containing full names, addresses, and Social Security numbers of 6,036 individuals. The dates of birth of 508 individuals were also included in the data file. No financial, banking, academic, or medical information was included in the data file.

To date, the university is not aware of any reports of identity fraud resulting from this incident, nor does it have any evidence to suggest that personal information has actually been misused.

The university has provided written notification to the affected individuals through the U.S. mail. The notices explain the steps the university is taking to safeguard individuals against identity fraud and suggest steps that affected individuals should take as well. As part of this effort, CSUEB is offering each affected individual a 12-month membership in a credit monitoring service at the university’s expense. Instructions are enclosed with the notice letter.

Affected individuals are encouraged to remain vigilant and to protect against possible identity theft by reviewing financial account statements on a regular basis for any unusual activity and monitoring credit reports.