38,000 Social Security Numbers Potentially Exposed After Theft

By Michele Hong | Jan 29 2008 | Crime and Safety |

A hard drive containing the Social Security numbers of nearly 40,000 Georgetown students, alumni, faculty and staff was reported stolen from the office of Student Affairs on Jan. 3, potentially exposing thousands of students to identity theft.

The external hard drive, located on the fifth floor of the Leavey Center, was used to back up a computer that contained billing information for various student services, including activities fees and student health insurance, according to David Lambert, vice president and chief information officer for University Information Services.

The university notified the Department of Public Safety, the Metropolitan Police Department and the U.S. Secret Service, which investigates possible misuse of private information, of the missing hard drive. The university has not learned of any reports of identity theft in the time since the hard drive’s disappearance, Lambert said.

The hard drive was not encrypted, meaning that information on the drive can be obtained by unauthorized parties, Lambert said. He was unsure if the hard drive was password-protected.

The files include all undergraduate students enrolled from 1998 through the middle of 2006. They also include postgraduates enrolled during that period who were assessed financial transactions that crossed between the main, Medical and Law campuses, such as student health insurance. Of the approximately 14,000 students currently at the university, roughly 7,700 — around 55 percent — had their private information on the missing hard drive, Lambert said.

In addition to current students, about 25,000 alumni also had information stored on the hard drive. Lambert said that the hard drive may also have included former students who are now employed by Georgetown. All told, the hard drive contained the information of approximately 38,000 people.

Vice President for Student Affairs Todd Olson said that no other health information besides billing information for student health insurance and records of student health insurance waivers was exposed.

According to the MPD incident report, Lynne Hirschfeld, the senior business manager for student affairs, notified MPD and DPS that the hard drive was missing when she returned to her office from winter break. The hard drive had been located in Hirschfeld’s office, which had been left locked, the report said. The theft had taken place sometime after Dec. 21.

University Information Security then examined the desktop backed up by the missing hard drive to determine the nature and magnitude of the information exposed. Lambert said that the university did not release news of the theft earlier because of the time needed to ascertain that information.

“That system contained an enormous amount of detailed information, all of which had to be reviewed in an attempt to determine what kind of information might have been on there,” he said. “That process is very staff-heavy and takes a significant amount of time.”

No suspects had been identified as of yesterday. “An enormous amount of information … was exposed,” Lambert said. “It would certainly be extraordinarily advantageous to be able to retrieve the hard drive.”

According to the MPD report, the hard drive was valued at $100. Lambert and Olson said that they were unsure whether the hard drive had been taken for monetary reasons.

Lambert said that within the next few days, the university will begin notifying every person whose private information may have been exposed with a letter explaining the incident. The letter will also advise the recipients to protect their credit information and to call a toll-free hotline set up by the university to confirm if their Social Security numbers were released and discuss what further actions they can take to protect their identities. In addition to the hotline, the university will be holding campus information sessions to answer individual questions.

In March 2006, an attack on a university server potentially exposed the names, birthdates and Social Security numbers of approximately 41,000 elderly area residents kept for research purposes. At the time, the university took similar measures, such as letters and a hotline, to alert and help the individuals involved. Erik Smulson, the university spokesperson at the time, said that no student financial or medical records were accessible from the server.

Lambert said that UIS has been developing an information security program throughout the past few years to protect confidential data stored on computers at the university. He added that UIS eventually plans to “remove legally protected information in instances it’s not necessary” on individual desktop computers, but he declined to discuss the precautions in detail.

In addition, since 1999, the university has been assigning individuals GOCard numbers and NetIDs to be used as identifiers to reduce the use of Social Security numbers in data storage.

“Although in this particular instance, the data breach was the result of a computer theft and not any kind of human error or system intrusion, it is an unfortunate example of the increasing importance of data security to all of us,” the letter to be sent by the university says.

— HOYA Staff Writers Brian Burke and Yoshi Myers contributed to this report.

Do you suspect that you have been the victim of identity theft since Jan. 3? E-mail news@thehoya.com.

Anonymous Anonymous
Jan 29 2008 at 7:41 a.m.

Whose head is going to roll for this one? Knowing Georgetown University, the answer is... (drum roll) absolutely no one.

This is absolutely ridiculous. Unacceptable. Unencrypted data on 40,000 students with social security numbers? Who's the moron who thought of that one?

Question, though. It says in the title that 38,000 SSNs may have been exposed, but then notes that since 1999, "the university has been using more GOCard numbers and NetIDs as student identification rather than Social Security numbers." Does that mean that post-1999, the Social Security numbers weren't listed?

Anonymous Anonymous
Jan 29 2008 at 8:55 a.m.

By the way I read the article, I'm assuming that SSNs were also compromised. While the university uses GOCard numbers, insurance companies don't.

I agree. This is absurd. Someone needs to be accountable, and the university students and staff who could be compromised should have been notified. How appropriate is it that the student newspaper should be the one to tell all of these folks that their information could now be on the black market?

Georgetown University - start taking some responsibility.

Jane Yu Jane Yu
Jan 29 2008 at 11:39 a.m.

The hard drive was missing since January 3rd? Since its disappearance, what measures have the administration taken to protect the identities within?

This is absolutely absurd. A theft happens; that's terrible. The university doesn't encrypt privileged information; simply ridiculous. We aren't informed of this until now? Completely unforgivable.

Anonymous Anonymous
Jan 29 2008 at 12:36 p.m.

This is absolutely unacceptable for several reasons. First of all, the discovery of this theft was made quite a while ago, and we should have already been informed by the University itself first rather than The Hoya (I'm sorry, but if The Hoya hadn't printed this article, I find myself wondering if we EVER would have found out). And secondly, WHY was this data unencrypted? Inexcusable that this information was not treated more carefully.

Anonymous Anonymous
Jan 29 2008 at 1:39 p.m.

This is crazy. Why has it taken the University so long to make this information public. Another question to be asked is why in the world are they backing up their data on a portable hard drive that was not secured inside the office? I hope they are going to offer those affected free credit watch services. How many other offices within the University do the same thing?

Anonymous Anonymous
Jan 29 2008 at 2:11 p.m.

Wow, that last paragraph shows a complete lack of any kind of accountability. Just because it was a theft doesn't mean that they don't have to take any responsibility in the poor and unacceptable handling of sensitive student information. An unencrypted backup sure seems like human error to me.

Anonymous Anonymous
Jan 29 2008 at 2:38 p.m.

While it's very unfortunate that this happened, I don't think that thefts like this can be completely prevented. I'm a recent alum, so I assume that I'll receive one of those letters soon telling me that my information was taken. Sure, the University should take as many precautions as possible to protect the identity of students. But, many major banks and financial institutions, as well as the Social Security Administration itself, have lost hard drives and data in recent years. I think the real problem is the burgeoning amount of electronic data that is stored regarding each of us. When that much information is recorded in so many different places, it seems like these types of occurrences may not be preventable.

So, should Georgetown institute more safeguards to prevent this from happening in the future? Yes. Would all the safeguards in the world guarantee that this couldn't happen again? No.

Anonymous Anonymous
Jan 29 2008 at 2:50 p.m.

Another example that Georgetown administration is a complete joke being run by total hacks. Why would someone who was being entrusted with this information not be required to password protect it? So glad that this was finally brought to my attention so that I can take precautions. Thanks for reporting.

Anonymous Anonymous
Jan 29 2008 at 2:54 p.m.

just another incident where Gtown tries to hide what happened to cover its own. this is embarassing. sometimes i wonder how i managed to spend 4 years there with things like this constantly going on.

Anonymous Anonymous
Jan 29 2008 at 3:19 p.m.

Georgetown has in many ways become a joke. I'm a recent graduate and can say, now that I am at a different university and have some comparison, that Georgetown treats its students with disdain and lives entirely off of its location and celebrity professors. This is not to implicate the faculty members or the students, many of which are excellent, but an absolutely incompetent administration. It does not surprise me in the least that this information has to be uncovered by the Hoya for anyone to find out. DeGioia gets paid how much???

Anonymous Anonymous
Jan 29 2008 at 3:24 p.m.

The only thing this article is missing is the phone numbers for this office so anybody interested can start calling in and demanding some answers. The only thing Georgetown's administration listens to is money, if we can get the word out to alums to start waving the "fix this or kiss your donations good bye" flag, you might actually see things like free credit reports and more security in the future. Otherwise they'll keep up the same dog and pony show that they use on every other issue they've dealt with.

Anonymous Anonymous
Jan 29 2008 at 3:44 p.m.

"The university has not learned of any reports of identity theft in the time since the hard drive’s disappearance, Lambert said."

What a BS statement.

Anonymous Anonymous
Jan 29 2008 at 3:54 p.m.

New Admissions office Powepoint slide...

Hey boys and girls.....Come to Georgetown.......you can get held up at gunpoint or have your identity stolen all in the same day.

Not to worry, no one wants your Louis Handbags, Uggs or Burberry scarfs. They want your cash and SSN.

Georgetown has indeed become a joke...

Anonymous Anonymous
Jan 29 2008 at 4:12 p.m.

As an alum of one of the affected grad schools, I don't even understand why the university continued to store my SSN years after I graduated. Perhaps it goes without saying, but if the university did not retain information like this, they wouldn't have to worry about someone stealing it.

Anonymous Anonymous
Jan 29 2008 at 4:22 p.m.

1/25 DPS Blotter includes this item:

Thursday, Jan. 17
Fraud, Off Campus, 5:46 p.m.
The complainant filed a report of fraud/identity theft after receiving notice of an account that had been opened in the complainant’s name without authorization. The Metropolitan Police Department was notified. No suspects have been identified. (http://www.thehoya.com/node/15129)>

...so I guess we all have this look forward to in the coming days/weeks/whatever. Maybe it's unconnected, but maybe not. Either way, this is just egregious conduct on the part of the university. I can't wait to get out of Georgetown.

Anonymous Anonymous
Jan 29 2008 at 4:22 p.m.

How about we let these peons who handle our sensitive data take some of the information security classes offered at our university. I guarantee if they sat through one day of one security class this issue would be nonexistent. Get educated, wtf.

Anonymous Anonymous
Jan 29 2008 at 4:28 p.m.

I'm an alumnus who received an email from the university regarding my stolen SSN. They've offered free credit monitoring service, but no explanation as to who to contact with questions or what I should do in the event that my information is used unlawfully. They've set up a hotline, but haven't indicated what it's for. They've set up "information sessions" but don't describe as to how they will keep us updated. As someone who is no longer part of the campus community, I'm not reassured in the least by this email. What's Todd Olson's number?

Anonymous Anonymous
Jan 29 2008 at 4:41 p.m.

The harddrive was taken on January 3 and they are just telling us about this NOW?

Anonymous Anonymous
Jan 29 2008 at 4:44 p.m.

I am an alumni that apparently is included in the list of people whose numbers have been stolen. I am really upset about this. This is completely unacceptable. I know that the MPD and the Campus Police are jokes, but until and unless they find who did this and get my information back, I will not donate another dime to the school (I have previously donated over $25000)

Anonymous Anonymous
Jan 29 2008 at 4:49 p.m.

I have just called the Office of Advancement to rescind my ongoing giving commitment. Their number is 202.687.1789.

Anonymous Anonymous
Jan 29 2008 at 5:00 p.m.

john degioia should have every cent that people lose from this horrible lapse of judgment (who the hell stores this kind of sensitive data on an unencrypted external hard drive??)deducted from his massive paycheck. to the georgetown administration--shame on you, for this and your string of other failures.

Anonymous Anonymous
Jan 29 2008 at 5:05 p.m.

Of course this is unfortunate, but I have a different perspective overall. I actually think they are being timely about this...it takes a long time to crosscheck the identities of the stolen SSNs with SSNs that exist on university databases. How could they have ascertained identities otherwise?

SSN still drives data storage for large personnel/student databases all over the country. Georgetown is very proactive in trying to change this state of affairs. I wonder how many of the comments on this site reflect any real knowledge of university data storage policy? It's easy to be angry, especially if you're on the list (as I am). It's harder to understand and reflect.

Anonymous Anonymous
Jan 29 2008 at 5:16 p.m.

Knowledge of how a university's student database works is completely irrelevant to the issue at hand. Georgetown's inept information management practices have exposed 38,000 current students and alumni to identity theft. What kind of reaction should we have -- a blase sense that all of this, too, shall pass?

California law requires institutions that have data breaches to report the fact that personal information has been compromised to those affected. Because more than a few of the 38,000 people affected by this breach likely live in California, Georgetown is simply complying with the law. It's hardly an act of courage.

I am so bitterly disappointed in Georgetown. I serve on the board of an alumni club, interview students for admission as part of GAAP, and actively donate to the university. And this is how I get repaid.

Anonymous Anonymous
Jan 29 2008 at 5:45 p.m.

The theft of a hard drive reveals nothing about how seriously the unversity takes data security. Data is protected by human beings who make mistakes; it's also stolen by thieves. I feel they are doing as much as they can do, and I certainly don't think this represents some sort of callous, secret disregard for current/former students, staff or faculty on the part of the admin.

Anonymous Anonymous
Jan 29 2008 at 6:11 p.m.

Several key questions emerge from this story:

1) Why is THE HOYA reporting it, and not the University to its students in a mass e-mail? In terms of full disclosure of a breach of this magnitude, it's the University's obligation to advise its students that their personal information is at risk, not the job of student media. The HOYA should be commended for advising us of this event.

2) Why did nearly a month pass until this was report, potentially giving a thief adequate time to disseminate our information? And why was this information so blatently unsecured--UIS should have had it secured in a better way, not out in the open as it was.

This is quite disappointing.

Anonymous Anonymous
Jan 29 2008 at 6:21 p.m.

The story notes that UIS wasn't the source of the breach, but a laptop in Student Affairs that logged into the overall network.

Anonymous Anonymous
Jan 29 2008 at 6:35 p.m.

As UIS has overall authority on university computing, they should have had measures in place to prevent unauthorized removal of secure data. Such could have been done by restricting the use of removable media (ie external hard drives, thumb drives) and the like and having the data stored electronically, that is, accessible via a server, and not in its tangible form as was the case on the external hard drive.

Anonymous Anonymous
Jan 29 2008 at 6:38 p.m.

Reveals nothing?! I do believe it said in the article that the data was not encrypted, nor did they even know if it was password protected! I am sorry, but I would like to think that our University cares enough about our privacy and security to encrypt this hard drive - or at least know whether or not the information is password protected... These security breaches happen way too often - laptops or hard drives with confidential information get stolen, with little to no protection on the actual machine - you would think that Georgetown could learn from others' past mistakes. Poor form, G-town.

Anonymous Anonymous
Jan 29 2008 at 7:12 p.m.

It seems like this is written by a GU employee, especially since the language mirrors what was said in the email to students...

Anonymous Anonymous
Jan 29 2008 at 7:18 p.m.

Pop Quiz:

WHY do we still use Social Security numbers as our Student ID numbers?

A-Ignorance
B-Laziness
C-Stupidity
D-All of the above

Anonymous Anonymous
Jan 29 2008 at 7:46 p.m.

There are "best practices" standards for data management and protection. Not using them (which is obvious in this case) is negligent and inexcusable.

Anonymous Anonymous
Jan 29 2008 at 8:05 p.m.

I encourage everyone to call Todd Olson, Director of Student Affairs, at 202-687-4056. Ask why his offices' business manager, Lynne Hirshfeld, kept an unencrypted external hard drive in her office, lying around for anyone who knows how to pick a lock or who has a master key to steal.

All alumni, faculty and staff should be outraged by Georgetown's incredibly poor security. How many of us keep the deeds to our home or stock certificates in safe-deposit boxes? Why can't Georgetown do the same thing, you know, with stuff like FORTY THOUSAND Social Security Numbers, names, and addresses.

Because Georgetown is a joke.

Anonymous Anonymous
Jan 29 2008 at 8:07 p.m.

Todd Olson's email: tao4@georgetown.edu
Lynne Hirshfeld: hirschfl@georgetown.edu

Anonymous Anonymous
Jan 29 2008 at 8:11 p.m.

This was not written by a GU employee, but was rather compiled after interviews and source checks. To The Hoya: Keep up the good work!

Anonymous Anonymous
Jan 29 2008 at 8:14 p.m.

The comment about being written by a GU employee was related to the prior comment, not the article.

GU Alumn GU Alumn
Jan 29 2008 at 8:20 p.m.

For those of you who haven't got the email yet
...enjoy:

January 28, 2008

Dear Current or Former Students, Faculty and Staff:

We are writing to inform you that you are among a group of individuals
whose personally identifiable information such as name and social
security number may have been exposed due to a recent computer theft
on campus. We regret this incident and wanted to alert you via email
as soon as possible after completing our investigation of the nature
and scope of the data at issue. Recognizing the seriousness of this
incident and the concern we share for the personal security of those
within our community, we are making arrangements to provide free
credit monitoring services for you. In the coming days you can expect
to receive a hard copy mailing with instructions on how to take
advantage of this service.

On January 3, 2008 an external computer hard drive was reported stolen
from a locked office within the Office of Student Affairs in the
Leavey Center on the Main Campus. Georgetown’s Department of Public
Safety responded to scene and continues to cooperate with an ongoing
investigation by the District of Columbia Metropolitan Police
Department. In addition, we have informed the U.S. Secret Service
about this incident so that they may follow up as they determine
appropriate.

A thorough internal investigation of the data that was contained on
the hard drive has now determined that the hard drive included
personally identifiable information for students enrolled and some
faculty and staff from 1998 through 2006. Since the files related to
a range of cross-campus student financial transactions processed
through the Office of Student Affairs, it pertained to students
enrolled at the Main, Medical and Law Center campuses. No financial
information, such as bank account or credit card numbers, was
contained in the hard drive. This incident is limited to this one
hard drive and does not extend to other University systems and
services where personal data may be stored or updated.

At this time Georgetown has no evidence that your personal data have
been misused. However, as a precaution, we are notifying you of this
situation and encouraging you to place a fraud alert on your credit
reporting accounts. You can find instructions for notifying credit
bureaus, utilizing the free credit monitoring service (as soon as it’s
available) and other information online at identity.georgetown.edu.
We have also established a toll free hotline (1-866-740-2458) which
will be operational as of 9:00am EST tomorrow morning. In addition,
if you are on or near the Main Campus, you may attend an information
session on Wednesday, January 30 at 2:00pm in the ICC Auditorium where
we will be able to respond to any questions in person. A separate
information session will also be held on the Law Center campus on
Thursday, January 31 at 4:00pm in McDonough Hall Room 203.

Although in this particular instance the data breach was the result of
a computer theft and not any kind of system intrusion, it is an
unfortunate example of the increasing importance of data security to
all of us. We deeply regret any incident that potentially exposes the
sensitive data of members of our community.

Georgetown recognizes the potential vulnerability of this kind of
information and consistently has taken steps to protect data across
University systems. For example, Georgetown has been actively
reducing the use of social security numbers in its data storage.
Individuals are now assigned a GoCard numbers and NetIDs to be used as
unique identifiers instead of social security numbers. We are also
taking other steps to implement enhanced security procedures across
campuses and continue to identify and incorporate emerging best
practices in data protection and security.

You may also take steps individually to protect sensitive data. Some
suggestions for doing so can be found at our Office of Information
Security website at security.georgetown.edu as well as online
resources from the Privacy Rights Clearinghouse at
http://www.privacyrights.org/identity.htm /> and the federal government’s identity theft website at http://www.ftc.gov/bcp/edu/microsites/idtheft/ />.

Please accept our sincere apologies for this incident. Thank you for
your cooperation and understanding.

Sincerely,

H. David Lambert Todd Olson
Vice President and Chief Vice President for Student Affairs
Information Officer

Anonymous Anonymous
Jan 29 2008 at 8:23 p.m.

Something tells me if Jessie Sapp were running the University instead of hitting game winning three pointers nonsense like this wouldn't be happening.

Anonymous Anonymous
Jan 29 2008 at 8:36 p.m.

Todd Olson: tao4@georgetown.edu
Lynne Hirshfeld: hirschfl@georgetown.edu

I encourage everyone to call Todd Olson, Director of Student Affairs, at 202-687-4056, or email him. Ask why his offices' business manager, Lynne Hirshfeld, kept an unencrypted external hard drive in her office, lying around for anyone who knows how to pick a lock or who has a master key to steal.

All alumni, faculty and staff should be outraged by Georgetown's incredibly poor security. How many of us keep the deeds to our home or stock certificates in safe-deposit boxes? Why can't Georgetown do the same thing, you know, with stuff like FORTY THOUSAND Social Security Numbers, names, and addresses.

Anonymous Anonymous
Jan 29 2008 at 8:38 p.m.

Where's that computer? Someone call Jessica Fletcher, Nancy Drew and the Hardy Boys, stat!!!

Anonymous Anonymous
Jan 29 2008 at 8:41 p.m.

According to the Hotline, the University has no plan to offer "free credit monitoring."

Anonymous Anonymous
Jan 29 2008 at 8:41 p.m.

PLEASE DIGG! SPREAD THIS DISGRACE SO GEORGETOWN TAKES ACTION!

http://digg.com/world_news/38_000_Social_Security_Numbers_Potentially_Exposed

Anonymous Anonymous
Jan 29 2008 at 8:51 p.m.

I just called the hotline too and they had no idea what was going on. They asked me if I wanted them to mail me more information. I politely declined once I realized they could not help. I also asked if they were located on campus and they are not. The woman said they are located in Winston-Salem. Doesn't seem too helpful...

Anonymous Anonymous
Jan 29 2008 at 9:09 p.m.

I am one of the affected parties of this security breach. I cannot, like many of the other commentators on here, understand why my personal data, which is several years old, was sitting on a hard drive in someone's office who is completely unrelated to my time at Georgetown. What information about me was listed among the "enormous amount of detailed information," as David Lambert put it? What kind of records is the university keeping about graduates? Are other databases, particularly those kept by the registrar and alumni affairs, safe? Will the university review its policies and take the time to teach non-UIS employees how to store personal data? I think the university should be as transparent as possible and that The Hoya should continue asking these questions as a public service to the community.

Anonymous Anonymous
Jan 29 2008 at 9:42 p.m.

We're all overlooking one critical fact of this issue--Lynne Hirschfeld left the drive on December 21, when the University offices closed for the Holiday break for some 10 days. This is the height of negligence--it's almost as if Hirschfeld was asking for the drive to be taken during the vacation. It's like your house--when you go on vacation, you remove valuables. Except in this case, its 38,000 peoples' valuable information. Well done, Lynn. You deserve a pat on the back for your caution and thoroughness in guarding proprietary information.

Anonymous Anonymous
Jan 29 2008 at 9:51 p.m.

It's great that you have taken a broad view of this. I too don't think this shows any ill will on the part of the University.

What it reveals is an arrogance along the lines of "our systems are adequate and these things won't happen to us." The fact, as laid out in the Hoya, are disturbing. Several of the typcial precautions to protect student and alum identies have been put in place. It shouldn't take "several years" to outlaw external hard drives or to eliminate SSNs as the primary ID (having worked in a small college, I know that this takes some work, but it isn't rocket science), or to limit access to databases on an as needed basis.

Anonymous Anonymous
Jan 29 2008 at 9:59 p.m.

This is a rather dumb record retention policy - have the "backup" drive a few feet from the computer it is backing up. Shouldn't the computer be backed up to a central drive or mainframe that the computer folks control, instead of a random external harddrive that is under a stack of papers for all we know.

This whole episode sounds like the beginning of a new "Bad Idea Jeans" commercial.

Anonymous Anonymous
Jan 29 2008 at 10:33 p.m.

Before calling on someone to resign or to be fired, perhaps we should get all the facts. This article in The Hoya, far from being a full exposition of the facts of the case, seems just to be a cursory explanation.

Anonymous Anonymous
Jan 29 2008 at 10:39 p.m.

Just read the letter from the university that was just sent out -- someone below recently posted it. All information in The Hoya's article is correct and seems to be, unfortunately, the full story.

Anonymous Anonymous
Jan 29 2008 at 10:56 p.m.

People have called on Lynn Hirchfield to be fired or resign. All we know is that the laptop was stolen from her office. Neither the article nor the letter says anything about why the laptop was located in her office, or her responsbility for its contents. THis isn't the full story.

Anonymous Anonymous
Jan 29 2008 at 11:22 p.m.

I do not believe this is the first time this has happened in the past 4 years. If I am correct this happened one other time, but not at the grand scale. i remeber having to deal with the whole alertng CC companies, etc..This is really unacceptable.

Anonymous Anonymous
Jan 29 2008 at 11:29 p.m.

If we were a GU student back then, but not an alum, how would they contact us if that contact info is nearly 10 years old? Clearly some people are not going to receive emails or letters.

Anonymous Anonymous
Jan 29 2008 at 11:29 p.m.

If you read the article, you would notice that (1) a laptop wasn't stolen, an external hard drive was. (2) She had it in her office and was aware of the data that was on it. (3) She did not have it secured (data or physically), because it walked out of her office over winter break. (4)The drive was located in her office because it served as a backup to her computer. She was clearly responsible for its contents.

I'm not calling on her to be fired, but it is her responsibility.

An Unhappy Alum An Unhappy Alum
Jan 29 2008 at 11:37 p.m.

I am an alumnus of the school - I received the e-mail this morning. I am extremely angry right now. Quite frankly, I am seriously contemplating retaining counsel and investigating legal action.

#1) The e-mail sent out was clearly designed to cover the ass of the school against potential litigation. I have serious doubts as to whether the office in which this hard drive was stored was actually locked. Even if it was - clearly, whatever security measures were in place were HIGHLY INADEQUATE relative to the data that was being stored.

#2) WHY DID GEORGETOWN RETAIN OUR SOCIAL SECURITY NUMBERS AFTER WE GRADUATED. THERE IS ABSOLUTELY NO REASON FOR THIS DATA BEING RETAINED

#3) I hope that everyone potentially affected by this is aware of the potential for harm when someone has your social security number. A full name + a matching SS# + an address can a) give access to credit lines and, b) serve as a springboard to accquire other information on our identities.

#4) Word of advice to Georgetown - if you want to cover your asses, you should offer all of us 1 year free access to ALL THREE CREDIT MONITORING SERVICES IMMEDIATELY - as in within the next 24 hours. Because the three services don't overlap one another - one might pick up something that the other does not. This would go a long way (not long enough, but it's something) toward addressing the angry feelings that are boiling amongst alumni.

#5) What I'm writing here is not unique. I've been in touch with many of my former classmates (umm ... did everyone get the e-mai? It seems like that).

It was one thing to have to suffer the incompetence of Georgetown administration / employees / organization when I was a 20-year-old student. Hey, it's college, we're learning great stuff, having a good time, etc. Shake it off.

It's another thing entirely when that incompetence FOLLOWS ITS ALUMNI AFTER GRADUATION. This should not have happened and the response, thus far, is inadequate.

Anonymous Anonymous
Jan 29 2008 at 11:56 p.m.

This is absolutely ridiculous. Georgetown knows they provided insufficient security. The best way for them to make up for this breach of trust is to provide every exposed individual with a year membership of Life Lock (www.lifelock.com).

Anonymous Anonymous
Jan 30 2008 at 12:24 a.m.

If Georgetown does not appropriately respond to this, I see no reason that a class-action lawsuit should not be in the works.

Anonymous Anonymous
Jan 30 2008 at 12:33 a.m.

Also, if you read the UIS guidelines for storing this sort of data (the link is already posted below), it states that faculty/staff must encrypt the data or attach a password to it, which Ms. Hirschfield did not do. Had this happened in the corporate world, you can bet she would have already been kicked out the door by now.

Jay Jay
Jan 30 2008 at 12:34 a.m.

This private information is being used maliciously! I lost ~ 20k and it just started today (29th). Check your bank and card histories.

msarinsky msarinsky
Jan 30 2008 at 12:42 a.m.

http://video.nbc4.com/player/?id=211333

Anonymous Anonymous
Jan 30 2008 at 1:09 a.m.

This sounds like both : a. a lie, and, b. fear-mongering. How would you "[lose] 20k" from this data theft? The most likely immediate thing we'll see is people taking out lines of credit using our names and SS#; longer term concerns center on identity theft and even personal safety. But there's no magic 'theif calls the bank, gives them my SS, and then they give him $20,000 from an account' It doesn't work like that, particularly with transfers over $10,000

If what you say is true, come back and give some real info in terms of what happened. You'd be helping a lot of concerned alums and current students. If this is bullshit (which, again, I suspect it is), then please, stop spreading fear. We have enough to deal with already.

Jay Jay
Jan 30 2008 at 2:15 a.m.

No problem, here is the info:

All of these purchases happened late the 28th and early the 29th. What is the best is the sequence of events go like this:

1) someone posing as me close my account at the Bank of America on M street (wow, laxed financial regulations...)

Which according to Bank regulator all that is required to close an account is a social, dob, and name.

2) they then treated themselves to lunch at Clydes in Georgetown (on me of course)

3) they then spent hundreds of dollars in different shops in The Shops at Georgetown Park.

4) they then used my credit card to order something from Cycles on M street to the tune of 10k.

And yes, I have all the statments to prove it.

I was able to stop all cards and transactions before they struck again, but the point is that this data is indeed being used maliciously!

No fear-mongering just facts.

Anonymous Anonymous
Jan 30 2008 at 2:19 a.m.

No, I'm sure the university did not mean to disseminate sensitive personal information about 40 000 people, and the incident is not a result of ill will. This incident does, however, demonstrates the administration's gross negligence, complete disregard for the people whose livelihoods this leak may endanger, and a dishonest, self-serving approach to dealing with problems. The reason for the long delay with notification was the concern over the impact this incident would have on donations. Even if it takes a long time to cross-check the SSN numbers, there is absolutely no reason to alert everyone on campus that they should watch out, as their identity data might have been compromised. Disgraceful. This university is not an educational institution, just an excuse for privileged n'er-do-wells to waste another four years and approximately 200 000 dollars of their parent's wealth in a drunken, cocaine-induced stupor, while this once respected institution sells off fractions of it's reputation without regard for actual facilities, teaching practices, or education.

Anonymous Anonymous
Jan 30 2008 at 3:45 a.m.

Todd Olson: tao4@georgetown.edu
Lynne Hirshfeld: hirschfl@georgetown.edu

I encourage everyone to call Todd Olson, Director of Student Affairs, at 202-687-4056, or email him. Ask why his offices' business manager, Lynne Hirshfeld, kept an unencrypted external hard drive in her office, lying around for anyone who knows how to pick a lock or who has a master key to steal.

All alumni, faculty and staff should be outraged by Georgetown's incredibly poor security. How many of us keep the deeds to our home or stock certificates in safe-deposit boxes? Why can't Georgetown do the same thing, you know, with stuff like FORTY THOUSAND Social Security Numbers, names, and addresses.

reply report

Justin Justin
Jan 30 2008 at 4:18 a.m.

The University has proved itself incapable of the most rudimentary security procedures. I have deleted all my information from the alumni directory to 1) prevent the University from screwing up anything else, and 2) prevent the University from ever contacting me asking for donations.

In addition, I will be writing a number of angry letters to the University indicating my extreme displeasure with the University's conduct and demanding that my social security number be removed from all records, and also writing letters to Congress, seeking the imposition of statutory damages in cases (such as this) where information is not reasonably secured, regardless of whether the stolen information is ever used fraudulently.

I am also exploring legal options. The University's failure to secure this information is simply outrageous, and should be punishable.

Anonymous Anonymous
Jan 30 2008 at 1:02 p.m.

Several comments:

To sue the University would just further damage many of the individuals who are already hurt by this breach of security. GU has what it has because of tuition payment and Alumni donations. These funds need to be used to run and improve GU and depleting them in a class action suit would serve no purpose that would change what has happened, just cause delay of projects and loss of more key employees.By the way,

Security at GU is a JOKE! As a parent, I have walked unto campus several times at all hours of the night and day with no questions asked. I am aware that computer theft and harassment of GU students by non students on campus is an ongoing issue. As a private institution adjacent to a major metro with a high crime rate, this lack of security and easy access to campus is well known and simply unacceptable. That computer theft is the only major incident is pure luck. Do we have to lose a student before security is tightened?

Stop using SS numbers as student numbers. Assign a student id# and use it.

Someone needs to be accountable for this. Find out what happened and move quickly. Take action and get a new plan in place. The MSB is supposed to be developing future business leaders. What a great opportunity to set the example for them on how to react to a situation of this proportion. Invoke crisis management and show the students they way issues like this should be handled. BTB the administration needs to realize this is real life and not academia. They can't run and hide from this, and passing the buck is NOT acceptable.

A last shot. Seems to me The Hoya has done a responsible job of reporting the story here. Maybe the administration should let the paper be independent and keep its name instead of trying to control it. Seems to me they have a lot of other things under their control they need to improve before worrying about control of the paper!

Anonymous Anonymous
Jan 30 2008 at 2:11 p.m.

I don't get why all of our information - eight years' worth - was sitting out on a hard drive in the Office of Student Affairs.

What was the student affairs staff doing with our information? I hope The Hoya does a follow up and figures out that piece of this issue.

Related, maybe it's time for Georgetown to set up an information security office to oversee how personal data is being used and stored across the campus. Right now, it seems decentralized. Having written policies without real oversight is an obvious shortcoming.

Anonymous Anonymous
Jan 30 2008 at 2:47 p.m.

You know, it's funny. I spent the last 24 hours enraged at the senseless nature of this security breach. Easy research and word of mouth told us that Lynne Hirshfeld, Business Manager for Student Affairs, is responsible and should be held accountable.

That's fine. But did you know that this failure to protect sensitive information is illegal, and EXPLICITLY stated as such in university policy?

"It must be noted that mistreament and mis-storage of confidential data is not only against university policy - it can also be a legal matter. Laws and regulations govern specific types of data....The Family Educational Rights and Privacy Act (FERPA), protects personal information about current and former students. See GU FERPA for more details."

Lynne Hirshfeld is on the Appeals Board and has access to even more confidential information than the 38,000 social security numbers she dismissed. How ironic that a woman who broke the faculty's code of conduct is one of a small circle of people bequeathed with upholding the student code of conduct. What a shame.

So in case you missed her contact info on an earlier post, her number is (202) 687-5225 or hirschfl@georgetown.edu

Anonymous Anonymous
Jan 30 2008 at 3:04 p.m.

The risk to student social security numbers does not end with the theft of this drive from Lynn Hirschfeld's Office. Todd Olson's office and DeGioia should be awarwe of the daily risk posed by the GU student Health Center, which requires students to read their social security number to the receptionist on the phone or in person when booking an appointment. When a student refuses to do so, he is denied the opportunity to book an appointment.

Personally, while I now am skeptic of the competency of the Office of Student Affairs, I cast even more doubt on the ability of the Student Health Center to protect this same information. Whether it's run by Medstar or not, Georgetown needs to ensure that such information is adequately protected there too.

Seems like now is the right time for the Admin to review University information security policies all across the board.

Anonymous Anonymous
Jan 30 2008 at 5:00 p.m.

Rumor has it that Georgetown has hired Chief Wiggum to find the stolen hard drive.

Ryan Ryan
Jan 30 2008 at 5:22 p.m.

A man much wiser than me gave me the following advice. I want to pass this along to everyone:

"1. Identity Theft will be a bigger problem for you as GU grads than for the US population as a whole. College grads, particularly from schools who have a reputation for affluent students, are much more tempting targets for fraud and identity theft then someone who has no money or no credit.

2. Notice the paragraph in this article that says GU "will begin notifying individuals who may have potentially had their personal financial info compromised". It is a federal and DC law that institutions take this action. For the most part you can expect an organization to send you a letter if they have messed up and revealed your personal financial info. However...this is a VERY expensive process. Institutions will try to get out of it if possible. The law is pretty specific as to when you have to be informed. There are not many loopholes, but there are some.

3. Because you cannot always know if some portion of your personal finances have been compromised, or if you are a victim of identity theft, you should have some form of personal financial protection. There are several pretty good companies out there that take advantage of new consumer protection laws. Typically these organizations monitor your credit reports and they let you know if an organization has been asked for your credit information. If someone steals your ID the first thing they are going to do is take out a loan or credit card in your name. To do that they have to run a credit check with one of the big three credit companies. That is one place you can catch them. They also normally offer some sort of insurance against financial loss or expense in correcting compromised records.

Here is one company I know of. https://www.trustedid.com/ Alternatively your personal bank may also have a program, same for your credit card company.

Want more options? Google "Identity Theft protection".

The thing is you have to make the effort to implement some form of ID theft protection. You should coordinate it with your parents as they probably have a huge say in your finances. They may already have something in place."

I would take his advice pretty seriously. Hope this helps.

Anonymous Anonymous
Jan 30 2008 at 5:54 p.m.

As a parent I urge all students,alum and faculty to call Transunion at 800-680-7289. They have a 3 minute automated phone prompt that immediately puts a"credit watch" on your SSN/credit at all 3 credit companies.

Check out their website at www.transunion.com>

You can do the same through equifax or experian.

Anonymous Anonymous
Jan 30 2008 at 6:06 p.m.

Todd Olson: tao4@georgetown.edu, 202-687-4056
Lynne Hirshfeld: hirschfl@georgetown.edu, 202-687-5225

Call and let your voice be heard regarding the fact that your identity is now at risk because of Lynne Hirshfeld, Todd Olson and others who did not take the security of our personal information seriously.

Anonymous Anonymous
Jan 30 2008 at 8:24 p.m.

Seriously? I would think that a college alum would understand the need for the university to maintain such records. I guess when your employer calls to verify your status or you need to order transcripts for graduate school or one of the other myriad of reasons one would need to verify your identity you'll appreciate the challenge of maintaining complex data.

To be honest, while this is frustrating, it is NOT UNIQUE to Georgetown. Organizations in every sector are having problems maintaining and securing data. Unfortunately, you just don't get notified every time your data is compromised.

This challenge is further complicated by people just buying technology to back-up data because they fear computer crashes. Walk into any office and you see the problem. Most workers don't know how to protect data because it is simply invisible ones and zeros to them. When the data was in filing cabinets or complicated mainframes it was much easier for folks to understand.

And the person who suggested a safety deposit box, obviously doesn't work in an office with real deadlines or they would understand how impractical that "suggestion" is.

Anonymous Anonymous
Jan 30 2008 at 9:02 p.m.

http://www.ipetitions.com/petition/savethehoya/signatures.html

Anonymous Anonymous
Jan 30 2008 at 10:03 p.m.

Is this because of the leak of the 38,000 SSNs? If so, how did they 1) get your credit card or credit card number? 2) know you had a BoA account and know the account number?

You can't just close a bank account unless you have a debit card or some form of ID.

Identity thieves strike by opening new credit lines. I don't see how they could have charged an existing credit card you own using just your SSN. How could they get the number?

All-in-all your story doesn't make sense. It would make sense if someone had stolen your wallet.

Anonymous Anonymous
Jan 30 2008 at 11:16 p.m.

Does anyone know the probability that our SSNs will be misused? I guess that would depend on what else was in the files, i.e. addresses, telephone numbers, etc.

Is the threat here that the thief could somehow hack into existing accounts with this info (by requesting an address change or password change or something) or is it simply that they will open up new lines of credits?

I guess I would just like a realistic picture of what I should be worried about.

Anonymous Anonymous
Jan 30 2008 at 11:32 p.m.

Seconded. I still think this comment is suspicious. I've never heard of a bank in my life that would allow someone to close out an account with 20k in it based on a name, SS#, and address.

I guess I could see (the ID theives) making a big effort, reseraching a particular name behind the data, creating a photo ID based on their research, somehow securing account #s etc. This sort of stuff COULD happen when they have access to the name / address / SS# - it's a springboard to a lot of bad stuff happening.

However, in this short of time for something that elaborate to happen? No. Still don't believe it.

Anonymous Anonymous
Jan 30 2008 at 11:36 p.m.

I'm confused by your rationale for not suing Georgetown. The time when I cared about Georgetown's progress / sustainability is long gone. You don't take a tortfeasor or a criminal and say "But hey, if we sue him ... it might really make things hard on him"

Too bad. That's life. Moreover, in the long run, a suit might be just what Georgetown needs to get a freaking wakeup call that their mismanagement and poor practices do, in fact, have consequences.

As students, we had terribly emasculated voices in the face of the administration. We're not students anymore and the wrongs that are being committed because of their incompetence are in no way minor, 'brush it off' sorts of events.

I have no sympathy for these areas of "Georgetown" and no patience for their screw-up.

Anonymous Anonymous
Jan 31 2008 at 2:23 p.m.

The SSN in USA has been a serious security problem for a long time. It is used as an identifier for almost everything and there don't seem to be any rules about who can ask for it or store it. Georgetown certainly has a problem here but its indicative of how SSN is allowed to be used. Its a defacto universal ID. The gov't should get its act together and make SSN more secure.

Doug Woodall Doug Woodall
Jan 31 2008 at 2:39 p.m.

Un-encrypted, in a locked office. Yup, hi security indeed.

Anonymous Anonymous
Jan 31 2008 at 7:40 p.m.

The most likely use of the stolen hard drive would be to hold stolen movies and songs. The person who stole it was most likely looking for more storage at a good price.

Anonymous Anonymous
Feb 02 2008 at 3:09 a.m.

I read all of the comments. Most responses posted here sound like "Fear and Loathing in DC."

First, understand why SSNs were stored. The Hoya says these may have been student health insurance records.
Medical systems use SSN to identify patients. The Federal government requires SSN to verify a taxable benefit. Federal income tax deductions and health care tax-free accounts require an SSN. Don't blame the university for using an SSN. (but you could blame them for storing several years worth).

Second, there were comments about how long it takes "to verify the data loss."
You don't need to try and match SSNs to some master database when a hard drive is stolen. If this was an external drive, then it was probably used to copy files from a PC. Assuming that's true, then you can just look at the data on the PC to see what is the worst case scenario of what is missing.

Third, there is a lot of anger towards the office of students affairs, and this seems a bit misdirected to me.
This was a theft of property. The lapse of data protection was secondary. Where was campus security? Georgetown has it's own small security force. What about security cameras? Over the holiday break, hardly anyone is on campus.

Why aren't the information systems folks getting some blame? Ultimately, isn't this their responsibility? Sure there are policies. Is there training for staff members? Are there checks and balances? Are there sanctions for infractions?

Finally, I can understand that those affected are upset. But so far, nothing has happened. They may be in greater jeopardy. But that's it. (so far...)

Have you ever encrypted data on a computer? I am a technology professional, and I've done it less than 6 times. When your computer security officer told you to be careful - did you yawn, or did you run home and encrypt your tax returns?

I know Lynn and Todd as colleagues, and between them they have dedicated over 25 years of outstanding service to Georgetown. And both have been consummate professionals.

You think people should be fired for locking their office and going away for Christmas break? Did you lock your office and go away for Christmas break?

This is a sad story and a loss to many. But your fears are eliminating the opportunity of advancement. And this message board is just propagating fear. Get smarter, not angrier. Didn't you go to Georgetown?

Anonymous Anonymous
Feb 02 2008 at 7:12 p.m.

So far nothing has happened? Are you kidding? Thousands of students and alumni have already put fraud alerts on their accounts, which means that their life has become much more complicated (ever tried to apply for a loan with a fraud alert on your credit file?), not to mention the frustration of dealing with this mess - the hotline is useless, and none of the credit reporting agencies have phone numbers where you can actually reach a person. To say that no damage has been done so far is ridiculous.

Ticked Off Alumnus Ticked Off Alumnus
Feb 07 2008 at 3:45 p.m.

So you known Lynn and Todd as colleagues -- that's just great. I'm touched. So on your say-so I should ignore the basic fact that they were grossly negligent with my personal information. Which, by the way, they didn't need to keep beyond whatever the applicable statute of limitations is -- likely three years. While you're wringing your hands over whether they might lose their jobs, we're worried that someone out there is ruining our lives as we speak. Seems like a fair trade to me.

It's a basic rule of business that when you mess up badly, you run the risk of getting fired. To ignore that rule is to say to your other employees that there are no consequences for monumental errors in judgment. "Consummate" professionalism or not, gross negligence is gross negligence. Oh, and lest you try to argue that they weren't grossly negligent, why don't you take a look at Georgetown's own information security guidelines? They didn't follow them, did they?

You say that you're a technology professional who almost never encrypts data? That doesn't exactly bolster your defense of Lynn and Todd here. Let's hope that you don't deal with others' sensitive personal information.

Ticked Off Alumnus Ticked Off Alumnus
Feb 07 2008 at 3:50 p.m.

Also, I just noticed your last comment. Trust me, I can be both angry AND smart. Going to Georgetown had nothing to do with that -- it's called being human. If you can't handle both traits at the same time, that's your problem.

Never Even A Student Never Even A Student
Feb 17 2008 at 6:23 a.m.

What's even more negligent is that Georgetown apparently retained the names and SSNs of people who were accepted but never attended the school! I was enrolled in the law school in 1997 (which is earlier than the 1998 date the article gives for affected students) for approximately ONE week before I was accepted off of the Wait List for my first choice and informed Georgetown of my decision to cancel my enrollment in Georgetown Law and enroll elsewhere. Why in the world wouldn't my personal information be deleted immediately upon being informed that I was canceling my enrollment?? And I am not the only person in this position. An employee at Georgetown's Advancement Office (whatever that is) told me that she had received several calls from people who had received letters about the data theft but had never attended even one day of class at Georgetown.

michael michael
Dec 10 2008 at 10:52 p.m.

That is pretty bad. Things like these should be prevented. Even when they happen, there is a need for immediate action!

Michael Michael
Jan 14 2009 at 8:48 p.m.

How can someone loose so much information! This is outrageous. I cant believe this happened!

odaLari odaLari
Feb 02 2009 at 3:02 p.m.

What I'm writing here is not unique. I've been in touch with many of my former classmates (umm ... did everyone get the e-mai? It seems like that).

Tom Tom
Feb 16 2009 at 3:43 p.m.

i dont understand how can someone lose so many numbers and jeoperdise the privacy of so many people. I feel like I should just put my Headphones on and not hear anything any more.

hrzbq hrzbq
Mar 07 2009 at 1:20 a.m.

无名深圳搬家公司有工商局批准的一家深圳搬家公司,主要为你深圳搬家。大型搬家公司
http://www.wumingbanjia.cn/
深圳搬家
深圳搬屋公司
深圳吊车公司
深圳尾板车出租
深圳吊装公司
深圳搬厂公司
罗湖搬家公司
福田搬家公司
南山搬家公司
盐田搬家公司
宝安搬家公司
龙华搬家公司
龙岗搬家公司
布吉搬家公司
深圳搬家公司

万利深圳空调维修,提供深圳空调加雪种、深圳空调安装、深圳空调拆装、深圳海尔空调维修、深圳LG空调维修、深圳新科空调维修、深圳志高空调维修、深圳三菱空调维修、深圳澳柯玛空调维修、深圳格力空调维修、深圳春兰空调维修、深圳大金空调维修、深圳日立空调维修、深圳松下空调维修、深圳三星空调维修、深圳索尼空调维修、深圳中央空调维修、深圳奥克斯空调维修、深圳美的空调维修。

online diploma online diploma
Mar 09 2009 at 12:05 p.m.

I AM HAPPY FOR THIS VIDEO. SO MANY OF US HAVE BEEN VICTIMS. HOPE THE PASTORS TRULY GET THE MESSAGE IN ALL DENOMINATIONS. IT HURT ESPECIALLY THE CHILDREN. ASK PERMISSION BEFOR YOUR SHARE PRIVATE DETAILS. ASK BEFOR YOU ENTER THE PULPIT-NOT WHILE ON THE PULPIT-WHATS THE SENSE ASKING THEN?
homeschool high school

Get Ged Online Get Ged Online
Mar 12 2009 at 11:50 a.m.

The Cardinal Newman Society is full of bloviating blowhards who are far removed from the reality of modern society. Their suggestions should either be ignored or roundly criticized. They ought to have absolutely no influence over university policy.

jeff jeff
Mar 18 2009 at 6:27 p.m.

All alumni, faculty and staff should be outraged by Georgetown's incredibly poor security. How many of us keep the deeds to our home or stock certificates in safe-deposit boxes? Why can't Georgetown do the same thing, you know, with stuff like FORTY THOUSAND Social Security Numbers, names, and addresses.

adam adam
Mar 21 2009 at 8:52 a.m.

The 100-member task force will consist of University Information Services personnel and leaders from the university’s three campuses, “along with those familiar with specific data in areas including finance, human resources, student information and research,” the UIS release said.

szjsx szjsx
Apr 30 2009 at 9:36 a.m.

深圳嘉顺兴搬家公司是深圳市成立较早的搬家公司,公司自成立以来,在社会的支持和员工努力下不断发展壮大,现在深圳市各区域都设搬家分点。 公司是经工商注册的正规搬家公司,可提供正式发票,不收取税点,请认准公司网站 http://www.szshunfafa.com http://www.szlsbj.com

深圳市中南装饰公司为您提供深圳厂房装修,深圳写字楼装修,深圳批灰刷墙等服务。

mnmh mnmh
May 18 2009 at 8:39 a.m.

منتديات
توبيكات جديدة وحصريه
ومريت على قسم كول فيه صور
ماسنجر و رموز ماسنجر
وحتى خلفيات ماسنجر
و ثيمات ماسنجر
موجوده وللي يحبون الكوره فيه
تغطيات رياضية وفيه
اخبار رياضية وعجبني
بعد قسم الرسائل فيه رسائل
كول و برامج للجوال و
ثيمات للجوال و
العاب للجوال كلها
حصلتها واممممم بالنسبة للبنات حدث ولاحرج فيه
فساتين خفق و
ازياء جديدة لافضل
المصممين و ديكور
للمنزل و اطباق و
حلويات وقسم عن صحة
الانسان وجمال الجسم و
العناية بالبشره وللي يحبون الخواطر والشعر فيه
خواطر حزينه وخواطر
شوق تعبجكم و قصص للي
يحبون القصص والاقسام الترفيهه قسم الصور مميز
صور روعه واغلبها صور
جديدة وغريبة ومضحكة وللبنوتات الصغار فيه
العاب طبعا
العاب بنات يحبها
قلبكم نجي للتصميم وعشاق الفوتوشوب فيه
صور للتصميم و
فلاتر و
فرش تحبها قلوبكم و
برامج حماية و
بلوتوث جديد واللي
يحبون الاناشيد فيه اناشيد
اطفال واسلامية جديدة نجي لأهم شي
سيرة الرسول صلى الله
عليه وسلم وسيرة الصحابة
و اذكار وادية
موجوده الله ينفعنا بها وبس

ftruity ftruity
May 21 2009 at 9:50 p.m.

深圳大众公司是专业深圳搬家的公司,区域服务:1深圳福田搬家公司
2深圳搬家公司/3深圳宝安搬家公司
6深圳南山搬家公司7深圳龙华搬家公司
8/9深圳托运深圳托运公司
10/深圳南山托运公司11深圳搬家公司/
深圳装修深圳装修公司


深圳市诚信搬家服务公司 区域服务:
深圳龙华搬家公司 深圳龙岗搬家公司
深圳罗湖搬家公司深圳盐田搬家公司
深圳布吉搬家公司深圳横岗搬家公司
深圳长途搬家公司 深圳长途搬家
深圳福田搬家公司 深圳公明搬家公司

深圳龙岗搬家公司
4深圳搬家公司/ 5深圳罗湖搬家公司

深圳福田托运公司深圳罗湖托运公司
深圳布吉托运公司深圳正规搬家公司

darkfall gold darkfall gold
May 26 2009 at 9:25 a.m.

Game circles recently the most popular topic is the "industry has been,
and culture where" the subject in the face of it?

Cigars Cigars
May 31 2009 at 1:00 a.m.

Forty Thousand names and socials misplaced???

"The 100-member task force will consist of University Information Services personnel and leaders from the university’s three campuses, “along with those familiar with specific data in areas including finance, human resources, student information and research,” the UIS release said..."

Well, that's just horrible. I hope someone's head is on the chopping block.

lcqbj lcqbj
Jun 05 2009 at 8:50 a.m.


网页设计
商标设计
如家
如家快捷酒店
锦江之星酒店
格林豪泰
格林豪泰
汉庭
汉庭
莫泰168
莫泰168
锦江之星
锦江之星
上海锦江之星
7天
7天
礼仪培训
位移计
拉绳位移传感器
拉线位移传感器
速8
速8
速8
锦江之星酒店
布丁酒店
桔子酒店
桔子酒店
机票
特价机票
打折机票
飞机票
折扣机票
机票查询
机票预订
国际机票
国际机票查询
国际机票打折
特价国际机票
北京国际机票
机票价格查询

Suzuki Car Forum Suzuki Car Forum
Jun 05 2009 at 6:04 p.m.

They only can hope it was stolen by an ordinary thief, who has nothing to do with data.

Post New Comment

Comments which are spam, off-topic, abusive, use excessive foul language or promote hate or bias will be deleted.

Anonymous comments will be held for moderation. This may take some time, so we recommend you create a free account. If you want a small picture next to your comments, get a gravatar.

Already have an account? Then login.