Individual identified in University security breach

Joshua Mauk, NU information security officer, (402) 805-7177
Melissa Lee, NU communications manager, (402) 472-7127, (402) 580-3297 (cell), or melissalee@nebraska.edu

University of Nebraska officials today (Wednesday, May 30) announced that an individual has been identified who they believe was responsible for the recent security breach involving student, alumni and employee records housed in the Nebraska Student Information System database.

UNL Police Chief Owen Yardley said, “We have seized computers and related equipment belonging to a UNL undergraduate student who we believe is involved in this incident. They are currently in the hands of law enforcement and undergoing analysis.”

Yardley said the individual was identified by NU Computing Services personnel through IP addresses used to access the system.  The forensics process can be very time-consuming, he said, and the name of the individual will not be released until an arrest is made. Additional information will be released when it becomes available.

“In order to assist with the criminal investigation,” Yardley said, “police asked the University not to release information about this security incident during the first 48 hours as work was done to verify the identity of the individual involved and necessary legal steps were taken to seize the property.”

Joshua Mauk, information security officer, said, “The University needed to balance the needs of the police investigation and the interest in widespread notification of the breach. We are continuing to notify individuals who have accounts within the NeSIS system.” Mauk said the University and law enforcement officers are continuing to analyze how the breach occurred and whether any information was downloaded.

A toll-free telephone number will be available on Friday to handle questions from those affected and updates continue to be made at http://nebraska.edu/security.