Philosophy Security Incident (SSN)
The University of Iowa Department of Philosophy has recently learned that a laptop computer owned by a former teaching assistant now living in Arizona, was stolen over the September 15 weekend in a break-in at his home. The hard drive on this computer contained the names, ID numbers, and class records such as attendance, test scores, and grades of 184 students. Social security numbers were also present in 100 of the student files. This information did not include birth date or any financial information such as credit card numbers. The students who were affected are being contacted directly. If you are visiting this page as directed by a letter sent to you from the University of Iowa Philosophy Department, your social security number was present on the laptop. Appropriate law enforcement officials are working on this case and they believe it is unlikely that the thieves targeted the laptop because of the data it contained. There is currently no evidence that data from the laptop has been misused in any way.
For a copy of the letter that was sent to the students click here.
Below are answers to some questions Philosophy students may have in light of the incident. If you have further questions, please send an email to david-stern@uiowa.edu.
- Whose information specifically was on the computer?
- If my information was on the laptop, does this mean that I'm a victim of identity theft?
- I’d like to know with certainty that my personal information isn’t being used by someone else. What can I do?
- What is a fraud alert?
- What should I look for on my credit report?
- I called the credit bureau fraud line and they asked for my Social Security number. Is it okay to give it?
- Do I have to call all three credit bureaus?
- Why can't I talk to someone at the credit bureaus?
- How long does it take to receive my credit report?
- How long does a fraud alert last?
- Will a fraud alert stop me from using my credit cards?
- Can I still apply for credit after I place a fraud alert on my credit report?
- Where can I find further information and advice about how to handle this situation?
- Will the University of Iowa contact me to ask for private information because of this event?
- What steps are you taking to improve the security of personal information on campus computers?
Q. Whose information specifically was on the computer?
A: Students affected were in sections of “Philosophy and Human Nature,” “Philosophy and the Just Society,” and “Principles of Reasoning ” taught by former UI teaching assistant Tuomas Manninen between 2002 and 2006.
Q. If my information was on the laptop, does this mean that I'm a victim of identity theft?
A. No. Even if someone had retrieved your information, it doesn't mean you are a victim of identity theft or that the person intended to use the information to commit fraud. As was stated above, there is no evidence that the thieves targeted the laptop to gain this personal information, nor is there any evidence that it has been misused. However, we feel it is important that affected students have the opportunity to take additional steps to protect their identity.
Q. I’d like to know with certainty that my personal information isn’t being used by someone else. What can I do?
A. The best way to protect yourself is to place a fraud alert on your credit files and review your credit reports, which you can obtain from one of three major credit bureaus: Equifax, Experian and Trans Union. If you notice accounts on your credit report that you did not open or applications for credit ("inquiries") that you did not make, these could be indications that someone else is using your personal information, without your permission.
Q. What is a fraud alert?
A. A fraud alert is a message that credit issuers receive when someone applies for new credit in your name. The message tells creditors that there is possible fraud associated with the account and gives them a phone number to call (yours) before issuing new credit. When you call the credit bureau fraud line, you will be asked for identifying information and will be given the opportunity to enter a phone number for creditors to call.
Q. What should I look for on my credit report?
A. Look for any accounts that you don't recognize, especially accounts opened recently. Look at the inquiries or requests section for names of creditors from whom you haven't requested credit.
Note that some kinds of inquiries, labeled something like "promotional inquiries," are for unsolicited offers of credit, mostly from companies with whom you do business. Don't be concerned about those inquiries as a sign of fraud. (You are automatically removed from lists to receive unsolicited pre-approved credit offers when you put a fraud alert on your account. You can also stop those offers by calling 888-5OPTOUT.)
Look in the personal information section for addresses where you've never lived. Any of these things might be indications of fraud. Also be on the alert for other possible signs of identity theft, such as calls from creditors or debt collectors about bills that you don't recognize, or unusual charges on your credit card bills.
If you find items you don't understand on your report, call the credit bureau at the number given on the report. Credit bureau staff will review your report with you. If the information can't be explained, then you will need to call the creditors involved and report the crime to your local police or sheriff's office. For more information on what to do, see the Iowa Department of Transportation’s page, “When bad things happen to your good name,” at http://www.dot.state.ia.us/mvd/omve/theft.htm
Q. I called the credit bureau fraud line and they asked for my Social Security number. Is it okay to give it?
A. The credit bureaus ask for your Social Security number and for other information in order to identify you and avoid sending your credit report to the wrong person. No one from the University of Iowa will initiate contact with you directly about this incident. If someone contacts you claiming to be from the University of Iowa and asks for personal information regarding this incident, we recommend that you not share the information until you can verify the request. We recommend that you do not release personal information in response to any contacts of this nature that you have not initiated.
Q. Do I have to call all three credit bureaus?
A. No. If you call just one of the bureaus, they will notify the other two. A fraud alert will be placed on your file with all three and you will receive a confirming letter from all three.
Q. Why can't I talk to someone at the credit bureaus?
A. You must first order your credit reports. When you receive your reports, each one will have a phone number you can call to speak with someone in the bureau's fraud unit. If you see anything on any of your reports that looks unusual or that you don't understand, call the number on the report.
Q. How long does it take to receive my credit report?
A. It could take about 20 days from the day you call the credit bureaus. It takes about 5 to 10 days from the time you call the credit bureaus to get your fraud alert confirmation letter with instructions on ordering your credit report. You should receive your reports in another 5 to 10 days from the time you order them.
Q. How long does a fraud alert last?
A. An initial fraud alert lasts 90 days. You can remove an alert by calling the credit bureaus at the phone number given on your credit report. If you want to reinstate the alert, you can do so. If you are the victim of identity theft, you can place an Extended Fraud Victim Alert on your report by submitting a copy of a valid identity theft report that you have filed with a federal, state or local law enforcement agency. An Extended Alert will remain on your report for seven years.
Q. Will a fraud alert stop me from using my credit cards?
A. No. A fraud alert will not stop you from using your existing credit cards or other accounts. It may slow down your ability to get new credit. Its purpose is to help protect you against an identity thief trying to open credit accounts in your name. Credit issuers get a special message alerting them to the possibility of fraud. Creditors know that they should re-verify the identity of the person applying for credit.
Q. Can I still apply for credit after I place a fraud alert on my credit report?
A. You should still be able to get credit. While a fraud alert may slow down the application process, you can prove your identity to a prospective creditor by providing identifying information.
Q. Where can I find further information and advice about how to handle this situation?
A. The Privacy Rights Clearinghouse Fact Sheet on "How to Deal with a Security Breach" provides a convenient summary of the steps you can take:
http://www.privacyrights.org/fs/fs17b-SecurityBreach.htm
Q. Will the University of Iowa contact me to ask for private information because of this event?
A. In similar cases at other institutions, people have reportedly been contacted by individuals claiming to represent the University and who then proceed to ask for personal information, including social security numbers and/or credit card information. Please be aware that the University of Iowa will not contact you directly with information regarding steps you should take to prevent possible fraud or identity theft; nor will the University ask for your full Social Security Number, University ID number, or Credit Card or Bank Account Number if you contact us, by email or telephone, for information. We recommend that you do not release personal information in response to any contacts of this nature that you have not initiated.
Q. What steps is The University of Iowa taking to improve the security of personal information on campus computers?
A. We are currently performing analysis of our systems to eliminate any remaining use of social security numbers as a unique identifier of our students from all of our systems. We are also evaluating our policies and procedures to ensure protection of student information. In particular, we are working to strengthen the use of password protection on laptops and files.
