Hack of Florida College System With SSNs Thought to Be 'a Professional, Coordinated Attack

TALLAHASSEE, Fla. (TheBlaze/AP) -- A Florida college's computer system was compromised by hackers last month who stole the confidential information of nearly 300,000 students statewide as well as that of employees including the school's president, officials said Wednesday.

The problem first was thought only to involve employees at Northwest Florida State College, but was found to be much larger than suspected.

The Department of Education said hackers stole 200,000 records including names, Social Security numbers, birthdates, ethnicity and gender for any student statewide who was eligible for Florida's popular Bright Futures scholarships for the 2005-06 and 2006-07 school years.

"We speculate this was a professional, coordinated attack by one or more hackers," said college President Ty Handy in a memo that went out to employees on Monday. Handy said the hackers did not get all the information from one file, but instead were able to piece together enough data to steal identities of at least 50 employees including his own.

The information has been used to either obtain loans that rely on being able to debit a personal bank account or to take out a Home Depot credit card.

"I recognize that this is a significant hassle for those whose information is used to commit identity theft," stated Handy. "I was one of the first seven or eight to be hit personally and I have spent several hours on the phone working with my bank and others to protect myself. It is not an enjoyable experience and for that I apologize."

Cristie Kedroski, the college vice president for university advancement, said it is standard practice for financial aid administrators to download the entire state scholarship file. She said administrators use the file when cross-checking information of students attending the school.

The hackers also stole more than 3,000 employee records, including some that contained confidential financial information such as direct deposit account numbers. Some 76,000 records containing personal identification information from current and former students at the college were also hacked.

Because of the scope of the breach that occurred between late May and late September, federal authorities have joined the local and state investigation that got under way last week, said the school.

"We want to be sure that we fully understand the situation and provide accurate information to those impacted," Florida College System Chancellor Randy Hanna said in a statement. "While some of the contact information is dated, we will be trying to reach every student whose records may have been captured."

The hack was discovered in the first week of October during an internal system review.

"We know that from May 21, 2012 until September 24, 2012 one or more hackers accessed one folder on our main server. This folder had multiple files on it. No one file had a complete set of personal information regarding individuals. However, by working between files, the hacker(s) have been able to piece together enough information to be able to engage in identity theft for at least 50 employees. We know that by working between files, data regarding name, Social Security number, date of birth, and Direct Deposit Account numbers were accessed. Additional directory information such as address, phone numbers, college email address, etc. was also likely compromised," Handy said in a statement.

At this point, Handy said the system has been restored.

The main 264-acre campus is located in Niceville, a small town near Eglin Air Force Base. The seven campuses include about 17,000 students.

For more information on the hack, visit the college's security website here.

Related:

• Millions of Locked Hotel Rooms Hackable Now: Who Will Pay for the Fix?
• Is Your Mind a Hacker's Next Target? Scientists Test Feasibility of Cheap Devices and 'Brain Spyware'
• There's a New 'Epic' Hack That Uses Only Two Easily Found Pieces of Information -- and Here's How to Protect Yourself

Featured image via Shutterstock.com.