Hack Into UC Berkeley Computers Puts 160,000 Records At Risk

[engine]

Hack Into UC Berkeley Computers Puts 160,000 Records At Risk [news.cnet.com]

Hackers broke into the University of California at Berkeley's health services center computer and potentially stole the personal information of more than 160,000 students, alumni, and others, the university announced Friday.

At particular risk of identity theft are some 97,000 individuals whose Social Security numbers were accessed in the breach, but it's still unclear whether hackers were able to match up those SSNs with individual names, Shelton Waggener, UCB's chief technology officer, said in a press conference Friday afternoon.

Their ID has not been stolen," he added. "Some data has been stolen."

[grandpa]

I thought this particular group (Berkeley) was smart enough to prevent this sort of action. I failed to grok. Using SQL injection the hackers accessed a public Web site and then bypassed additional secured databases stored on the same server. Secured databases on the same server aren't secure at all. Any bets on whether the passwords were even different, or changed at least every three months?

[creeking]

what medical data was stolen?

even if it was just appointment and scheduled test info, it could be revealing.