More than 22,000 current and former University of Missouri-Columbia students are the potential victims of identity theft after a malicious hack attack last week. How the hackers broke into the server is interesting. As noted in Computerworld, the attack came by way of a web form used to track the status of helpdesk queries.
IT staffers noticed unusual activity that began around 5:30 a.m. CDT last Thursday, then tied a large number of database query errors to the problem on Friday. Logs showed that the attacks ended at 9:34 a.m. Friday. That day, technicians disabled the account used to access the database from one IP address in China and another in Australia. The FBI was alerted on Monday.
“The hacker was able to reach the information by making thousands of queries over a span of hours, allowing the identities to be exposed one at a time,” the university reported.
Thanks to Wired Campus for the Computerworld link.