- University of Michigan students, employees, alumni and others may have had their information stolen by an ’unauthorized third party’
- U-M will offer free credit monitoring services to affected people
- The university says it is working to make its technology more secure
University of Michigan students, employees and alumni may have had their personal and financial information compromised by an August data breach, the university announced Monday.
The university shut down its campus internet services after detecting a “significant security concern” the weekend before classes started.
Now, the university said its investigation found an “unauthorized party was able to access certain university systems” from Aug. 23 to Aug. 27. Classes began Aug. 28.
Related:
- Report on deadly MSU shootings offers little insight into campus probe
- Michigan council hears bold (if vague) ideas to solve population crisis
- Lack of school counselors hobbles Michigan college enrollment efforts
Students, applicants, alumni, donors, employees and contractors may have had their Social Security numbers, government-issued ID numbers, financial account and health information compromised, the university said.
Also, research study participants and patients at the University Health Service and School of Dentistry may have had demographic information, financial information, clinical information and other information possibly compromised.
Ravi Pendse, vice president for information technology and chief information officer, and Sol Bermann, chief information security officer and executive director of information assurance, announced the update Monday afternoon.
“The investigation was comprehensive and determined that the unauthorized third party was able to access certain information, including information relating to certain members of our community,” they said.
“We are currently in the process of notifying relevant individuals. We understand this news is difficult and we are committed to supporting every member of our community.”
Officials said the U-M is still coordinating with law enforcement and is working with cybersecurity experts to “take steps to harden our systems and emerge from this incident as a more secure community.”’
What to know
The university mailed letters Monday to those who were affected with known addresses. Letters should arrive in five business days.
The university is also offering free credit monitoring services to those affected. People interested in the service — or those with questions — should call the university’s call center at 1-888-998-7088. It is open 9 a.m. to 9 p.m. Monday through Friday.
The university’s announcement also includes how to report identity theft to the Federal Trade Commission and where to request credit reports.



