ANN ARBOR, MI – A third-party source infiltrated University of Michigan computer systems, which led to officials shutting down university internet during the outage at the start of the fall semester, officials said.
The university first detected suspicious activity on its campus computer network on Aug. 23, according to university spokeswoman Kim Broekhuizen. The university’s Information Assurance team, which fights cybersecurity threats and malicious actors, shut down the system the afternoon of Aug. 27.
An investigation was launched into the hack, and with the help of third-party experts, it was determined that an unauthorized individual was able to access certain university systems from Aug. 23-27, officials said.
“Based on this data analysis, we believe that the unauthorized third party was able to access personal information relating to certain students and applicants, alumni and donors, employees and contractors, University Health Service and School of Dentistry patients, and research study participants,” Broekhuizen wrote in an email to MLive/The Ann Arbor News.
The university has determined that students, applicants, alumni, donors, employees and contractors have had the following information accessed: Social Security numbers, driver’s license or other government-issued identification numbers, financial account of payment card numbers and/or health information, officials said.
Research study participants through the University Health Service and School of Dentistry have had the same information accessed, plus any information related to participation in certain research studies, officials said.
In addition to disconnecting the campus network from internet, the university notified law enforcement and is working with outside cybersecurity experts to make its network more secure, officials said.
Letters were sent on Monday, Oct. 23 to all university individuals affected, officials said. People with sensitive information from this incident are being offered a credit monitoring service free of charge from the university, officials said.
Credit reports can be accessed in the following ways:
- Go to AnnualCreditReport.com or call 877-322-8228
- Go to Equifax.com or call 800-685-1111
- Go to Experian.com or call 888-397-3742
- Go to TransUnion.com or call 800-680-7289
Individuals may also contact law enforcement to report suspected identity theft, as well as the Federal Trade Commission at 877-438-4338. The commission can also be reached online at ftc.gov/idtheft or by addressing a letter to the Federal Trade Commission, Consumer Response Center, 600 Pennsylvania Avenue, NW, Washington, D.C. 20580.
Individuals concerned and seeking more information may call a dedicated university call center at 1-888-998-7088 between 9 a.m. and 9 p.m. Monday to Friday.
If you would like more reporting like this delivered free to your inbox, click here and signup for our weekly newsletter: Michigan Schools.
Want more Ann Arbor-area news? Bookmark the local Ann Arbor news page or sign up for the free “3@3 Ann Arbor” daily newsletter.
