4 ms·

"Fortunately, no personal identifying information was exposed." How can they know this?

• hakre 4y ago
  > How can they know this? No insights on that, but this is more the way I read such statements: This is their report of what they know. Common sense dictates that this does not mean much as we normally only know a fraction of what is. However it might also be a sign that they are not yet aware of much at all as it is that overly unspecific.
• edgyquant 4y ago
  Maybe the database that was stolen had none? I know my old community college just used a pin for everything. Maybe all the data tracks to this pin and then another database contains the pin to real name/info mapping? Hopefully personal information at a college has stricter regulation.
  • hakre 4y ago
    In this case the pin is the person identifying date. If such a database system was used at place and in time of the incident, it is known how many individuals are affected and what data got out. It is just not known which individuals in specific. Should be common to send a notice to all individuals then and explain the details so those who are affected do know and can act.
• protomyth 4y ago
  They might have outsourced their enrollment system like a lot of smaller colleges to the vendor (e.g. Empower, Jasmine) and not have had the information on servers that were compromised.