Skip to main content Skip to navigation
Security incident

Washington State University identifies and addresses security incident involving stolen hard drive

Washington State University (WSU) is committed to protecting the security and confidentiality of all personal information entrusted to it. Regrettably, the University recently became aware of a security incident involving certain community members’ personal information.

On April 21, 2017, we learned that a locked safe containing a hard drive had been stolen. The hard drive was used to store backed-up files from a server used by our Social & Economic Sciences Research Center (SESRC). Immediately upon learning of the theft, we initiated an internal review and notified local law enforcement.

On April 26, we confirmed that the stolen hard drive contained personal information from some studies and evaluations conducted by the SESRC. As a result, we retained a leading computer forensics firm to assist in the investigation. The drive contained documents that included personal information such as names, Social Security numbers and, in some cases, personal health information. Entities that provided data to the SESRC include school districts, community colleges, and other customers.

We take this incident very seriously. We are notifying impacted individuals so they can take steps to protect themselves and offering free credit monitoring and identity theft protection services to those individuals whose personal information may have been accessed. We are also notifying the entities that provided SESRC with data that included personal information.

As president of Washington State University, I deeply regret that this incident occurred and am truly sorry for any concern it may cause our community. The University is taking steps to help prevent this type of incident from happening again. These steps include strengthening our information technology operations by completing a comprehensive assessment of IT practices and policies, improving training and awareness for University employees regarding best practices for handling data, and employing best practices for the delivery of IT services.

WSU began mailing letters to affected individuals on June 9 and has established a dedicated call center to answer any questions. If you believe you may be affected and have not received a letter by June 30, or have additional questions, please call our dedicated assistance line at 866-523-9195, Monday through Friday, between 8:00 a.m. and 6:00 p.m. Pacific Daylight Time (closed on U.S. observed-holidays).

Sincerely,

Kirk H. Schulz
President

Sasi Pillay
Vice President for Information Technology Services and CIO

How did WSU get my information?

For answers to similar questions, please see our Frequently Asked Questions.

Dedicated assistance line

866-523-9195

Monday through Friday, 8:00 a.m. to 6:00 p.m. Pacific Daylight Time (closed on U.S.-observed holidays).