Earlier this year, Yale University announced that from April 2008 to January 2009, the names, Social Security numbers, and birthdates of alumni, faculty members, and staff members were stolen from a Yale database. University email and physical addresses were also stolen in some instances. The breach wasn’t discovered until a decade later, in June 2018.
Following a lawsuit filed against Yale for the breach in August, a second lawsuit was filed against the university this month.
Second lawsuit details
The second lawsuit claims:
- Yale did not properly handle the personal information and the data was sent to unauthorized people during the breach
- The personal data compromised in the breach was deleted from servers in September 2011 because it was deemed unnecessary
- In 2012, criminal hacker group NullCrew informed Yale it had obtained personal data by taking advantage of database security vulnerabilities
Significant data breaches
You can discover how to prepare for a data breach by visiting our #BreachReady page. We break the process down into six simple steps and recommend tools and services you can use to complete each task.