Monday, June 30, 2008

Security Breach - Oklahoma State University

IdentityTruth Reaches Out To The 70,000 Oklahoma State University Students, Staff And Faculty Impacted By Server Breach

Waltham, MA - May 19, 2008 - A breach in an Oklahoma State University computer server exposed the names, addresses and Social Security numbers (SSNs) of approximately 70,000 students, staff and faculty who purchased parking and transit service permits in the past six years. According to news sources, the discovery of the breach originally occurred in March; the University began notifying permit holders as of May 14. On discovery of the breach, OSU contacted federal law enforcement about the incident and immediately took down all access to the server.

After a stolen laptop exposed the records and personal data of 37,000 students, faculty and staff, OSU transitioned most of its services to random 8-digit identifying numbers for students instead of using SSNs. However, the server used for the parking and transit services had not been transitioned. The OSU website offers resources for helping to manage potential risks stemming from this data breach. It specifically urges individuals to look closely at their credit information.

Because credit monitoring alone does not help to prevent identity theft, IdentityTruth is also reaching out to affected individuals to offer special pricing on its comprehensive identity theft prevention technology. IdentityTruth detects real-time suspicious activities, fraud schemes, credit requests and related data breaches. IdentityTruth uses this information to build an individual identity profile offering a complete picture of a consumer’s identity risk - from credit information to SSN tracking.

“The process of protecting all forms of personal data is extremely complex, and is by no means infallible,” said Steven Domenikos, CEO of IdentityTruth. “While most institutions and organizations are aware of the risk that data exposure causes, exposure can and will happen because of human error, technology failings or malicious hackers targeting data. The only way to really control the process is to clearly understand where your data resides and the active level of risk at any given time. This can only be achieved with proactive, comprehensive management services like those provided by IdentityTruth.”

IdentityTruth is offering a one-month special subscription rate of $1 for more than 70,000 people reportedly impacted by the breach. IdentityTruth is a unique service that provides more complete protection than other, credit-based services. IdentityTruth offers all of the standard identity protections, such as fraud alerts, but goes far beyond standard identity theft prevention services to provide the most comprehensive protection available in the market--all for the same price as other companies charge for fraud alerts alone. IdentityTruth services are also backed by a $2 million service guarantee.

IdentityTruth's comprehensive identity theft prevention service:


  • Reports suspicious events in the past, such as unrecognized addresses or phone numbers;
  • Ensures that free fraud alerts are properly activated on the consumer’s credit profile with the three credit bureaus;
  • Helps to predict possible fraud actions that could impact the individual in the future;
  • Delivers ongoing alerts about any changes to the individual’s credit and identity profile; and
  • Reports on any related regionalized data breach that could have impacted the individual’s identity.
IdentityTruth provides subscribers the most complete identity theft prevention service available today for the same price as other companies charge for fraud alerts alone.

Individuals who believe their information may have been compromised as part of the OSU data breach are invited to contact IdentityTruth at 800-684-1336. IdentityTruth service will be offered to any impacted individuals for $1 for the first month’s service. For more information about IdentityTruth’s offering go to http://www.identitytruth.com/databreaches.


About IdentityTruth Inc.
IdentityTruth, is the leading provider of a new breed of service to help consumers safeguard their privacy and identity. Through innovative technology, individuals receive the earliest possible notificationTM in advance of potential misuses of their identities so they can take better control. Early detection is the best protection. IdentityTruth is a privately held, VC- funded company headquartered in Waltham, Massachusetts. Investors include Argonaut Ventures and Stata Venture Partners. For more information, go to www.identitytruth.com or call 781-684-1300.

# # #

Oklahoma State University is not affiliated in any way with IdentityTruth and this press release should not be viewed as an endorsement by Oklahoma State University of IdentityTruth or its Service.