skip banner navigation new york state banner - this will open a new window  
CPB Home Press Releases Consumer Links

SunGard Breach Widens

The security breach resulting from the theft of a laptop belonging to SunGard Higher Education, the Pennsylvania-based private software company that maintains student records systems under contract with SUNY campuses and other institutions, has widened. Originally it was reported that the breach had affected students at Buffalo State College. While the complete extent of the problem is still unknown, it now appears that the breach involved at least 18 colleges within and outside of NYS. A breach notification form filed with the CPB states that while at least 24,000 persons have been affected, the final number is still being determined. According to the form, it is not clear how many NYS residents have been affected.

At least thirteen campuses of the State University System of New York have been affected, including the following schools: Buffalo State College, Fredonia State College, Niagara County Community College, Genesee Community College, Jamestown Community College, Adirondack Community College, Brockport State College, Binghamton University, Downstate Medical Center, Dutchess Community College, Herkimer County Community College, Monroe Community College and Orange County Community College. Out-of-state institutions including Central, Eastern, Southern and Western Connecticut State Universities, and Northwest Missouri University, are also involved.

It appears that the stolen laptop contained names and Social Security numbers for current and, in some cases, former students. Exposed data also included some financial aid information, e-mail addresses, birth dates, and driver identification numbers.

Individuals who want more information on the breach and on services SunGard is providing to breach victims should visit SunGard’s website. SunGard has also set up a help desk to respond to questions at 1-866-520-2408. Individuals can also gain information from the CPB on preventing identity theft and applying a security freeze.