University of Minnesota Faces Lawsuit Over Data Breach

A lawsuit has been filed against the University of Minnesota, claiming that the institution failed to adequately protect personal information during a recent data breach. The lawsuit, brought forth by a former student and a former employee, accuses the university of not taking sufficient measures to safeguard sensitive data.

According to the lawsuit, the university could have prevented the breach, as stated by attorneys representing the plaintiffs in federal court. The university has not commented directly on the lawsuit, but a spokesperson emphasized that the safety and privacy of everyone within the university community remain a top priority.

Huge Data Breach Impacting Millions

Upon questioning by the Minneapolis Star Tribune, the university acknowledged that it became aware on July 21 of an unauthorized party claiming to possess sensitive data from the university's systems. However, the university did not specify how it discovered the breach. On the same day, a cybersecurity news site reported that a hacker had accessed around 7 million Social Security numbers dating back to 1989.

The hacker reportedly gained entry to the university's data warehouse to analyze the impact of affirmative action policies following a U.S. Supreme Court ruling on race considerations in college admissions. It is unclear whether any demands were made by the hacker.

Investigations Underway

The university's interim president, Jeff Ettinger, questioned the veracity of the claims, stating that evidence is necessary to confirm their validity. Authorities are currently investigating the matter, with both the FBI and the Minnesota Bureau of Criminal Apprehension involved.

The lawsuit was filed on behalf of two individuals: Geoff Dittberner, who was a student at the university and also worked there; and Mary Wint, a former university nutrition educator and patient of its healthcare system. The attorneys are seeking class-action status for the lawsuit, which alleges that the university violated the Minnesota Government Data Practices Act. While the specific monetary compensation sought by the plaintiffs has not been disclosed, the lawsuit sheds light on the concerns surrounding data security and privacy breaches.