URI data breach could affect personal information of thousands

SOUTH KINGSTOWN – The University of Rhode Island is investigating the inappropriate collection and possible use of information related to about 3,000 university email accounts.
On Thursday, URI began notifying those affected so they can take appropriate steps to prevent improper access to their email (and social network or other) accounts and to protect their personal information. The university is unable to confirm an exact date for the data security incident.
URI has reported this apparent breach to the R.I. Attorney General and the URI Campus Police have initiated an investigation.
Based on information obtained early in the investigation, it appears that an individual who is not a student or employee of URI inappropriately collected generally nonpublic information relating to some current and former URI students – names, URI email addresses, URI email passwords, and dates of birth of approximately 3,000 current or former students, and in several cases also collected one or more of the students’ personal email addresses and sometimes the passwords associated with those personal email addresses.
URI said some students’ (or former students’) personal email and/or Facebook accounts were also accessed.
Affected students and former students were notified early Thursday.
URI officials believe the security incident did not include Social Security numbers, credit card information or any other financial information, but advised students and former students to take precautions and change passwords.
The University has posted a FAQ Web page regarding the security incident at the following link – web.uri.edu/publicsafety/data-security-issue/.