{"id":41533,"date":"2023-06-28T22:58:58","date_gmt":"2023-06-29T02:58:58","guid":{"rendered":"https:\/\/inside.wooster.edu\/technology\/?page_id=41533"},"modified":"2024-03-19T14:56:58","modified_gmt":"2024-03-19T18:56:58","slug":"it-alert-national-student-clearinghouse-moveit-security-vulnerability","status":"publish","type":"page","link":"https:\/\/inside.wooster.edu\/technology\/moveit-transfer-security-vulnerability\/it-alert-national-student-clearinghouse-moveit-security-vulnerability\/","title":{"rendered":"National Student Clearinghouse MOVEIt Security Vulnerability"},"content":{"rendered":"\n

The National Student Clearinghouse (NSC), which processes student data on Wooster\u2019s behalf, is one of the institutions affected by the MOVEIt Transfer software vulnerability.\u00a0 <\/p>\n\n\n

Updates<\/h2>\n\n
\t\t\t\n\t\t\t\t\t\t\t\t<\/path><\/svg>\n\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t<\/path><\/svg>\n\t\t\t\t\t\t\t<\/span>\n\t\t\tJune 28, 2023<\/strong> via email<\/span><\/div>

IT Alert \u2013 National Student Clearinghouse Potential Security Vulnerability<\/strong>

Recent coverage in the national and technology media<\/a> indicates many organizations in the US and globally have been affected by a significant security event involving the MOVEIt file transfer application.
The College of Wooster does not use the MOVEIt application.\u00a0 However, the National Student Clearinghouse (NSC) which processes student data on Wooster\u2019s behalf, is one of the affected institutions.\u00a0 Yesterday afternoon the NSC informed us that some of our files were accessed in the incident.\u00a0
NSC\u2019s investigation continues, and they have advised that they will follow up with additional information regarding the impact to the College\u2019s information.
Some of the data we share with NSC includes personally identifiable information such as social security numbers and dates of birth.
Information about NSC\u2019s privacy practices is available on their privacy commitment page<\/a> and questions may be submitted through their contact form<\/a>.
We have developed an \u201cFAQ\u201d that includes more information about the NSC and data they process.\u00a0
We continue to monitor this developing event, both through NSC communications and information security lists.\u00a0 We will provide relevant updates as we have them.<\/p><\/div><\/div><\/div>\n\n

FAQ<\/h2>\n\n
\t\t\t\n\t\t\t\t\t\t\t\t<\/path><\/svg>\n\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t<\/path><\/svg>\n\t\t\t\t\t\t\t<\/span>\n\t\t\tWhat is the National Student Clearinghouse?<\/strong><\/span><\/div>

The National Student Clearinghouse is a nonprofit and nongovernmental organization that provides educational reporting, data exchange, verification, and research services.\u00a0 You can find more information about the Clearinghouse on their website<\/a>.<\/p><\/div><\/div>

\t\t\t\n\t\t\t\t\t\t\t\t<\/path><\/svg>\n\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t<\/path><\/svg>\n\t\t\t\t\t\t\t<\/span>\n\t\t\tWhat is the relationship between the Clearinghouse and The College of Wooster?<\/strong><\/span><\/div>

The College uses the services of the Clearinghouse for student enrollment reporting for compliance with the Department of Education\u2019s National Student Loan Data System and for degree verification services.<\/p><\/div><\/div>

\t\t\t\n\t\t\t\t\t\t\t\t<\/path><\/svg>\n\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t<\/path><\/svg>\n\t\t\t\t\t\t\t<\/span>\n\t\t\tWhat do we know about the impact of the vulnerability?<\/strong><\/span><\/div>

Currently, the Clearinghouse has not provided details of the impact other than that they believe some of our data was accessed by an unauthorized party.\u00a0<\/p><\/div><\/div>

\t\t\t\n\t\t\t\t\t\t\t\t<\/path><\/svg>\n\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t<\/path><\/svg>\n\t\t\t\t\t\t\t<\/span>\n\t\t\tWhat data does the Clearinghouse maintain about students?<\/strong><\/span><\/div>

Colleges and universities provide a standard set of data items to the Clearinghouse.\u00a0 In addition to where the student is or has enrolled and directory information, the data incudes items that are protected under federal, state, and international privacy laws, such as birthdate, social security number, educational program progress, Pell grant status, veteran status, race\/ethnicity.<\/p><\/div><\/div>

\t\t\t\n\t\t\t\t\t\t\t\t<\/path><\/svg>\n\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t<\/path><\/svg>\n\t\t\t\t\t\t\t<\/span>\n\t\t\tDo we know if any of our student data has been breached?<\/strong><\/span><\/div>

On June 28, 2023, the Clearinghouse advised the College that it believes \u201can unauthorized party\u201d obtained certain Clearinghouse files that included our data. We do not know definitively what data was accessed.<\/p><\/div><\/div>

\t\t\t\n\t\t\t\t\t\t\t\t<\/path><\/svg>\n\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t<\/path><\/svg>\n\t\t\t\t\t\t\t<\/span>\n\t\t\tI\u2019m a current or former student. Is there anything I should be doing now?<\/strong><\/span><\/div>

While we await further information, it is always good practice to monitor credit reporting services and to place a fraud alert on your credit account if you think your protected information may have been compromised. The Consumer Financial Protection Bureau<\/a> has good resources about protecting yourself against identity theft. The Federal Trade Commission<\/a> has information about the \u201cwarning signs\u201d of identity theft (which are always good to know).<\/p><\/div><\/div>

\t\t\t\n\t\t\t\t\t\t\t\t<\/path><\/svg>\n\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t<\/path><\/svg>\n\t\t\t\t\t\t\t<\/span>\n\t\t\tWhere can I learn more about the Clearinghouse\u2019s privacy policies & practices?<\/strong><\/span><\/div>

You can learn more about their policies and practices on their privacy commitment page<\/a>.<\/p><\/div><\/div>

\t\t\t\n\t\t\t\t\t\t\t\t<\/path><\/svg>\n\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t<\/path><\/svg>\n\t\t\t\t\t\t\t<\/span>\n\t\t\tWhere can I find more information from the Clearinghouse about the incident?<\/strong><\/span><\/div>

The Clearinghouse has created an information page<\/a> on its website.<\/p><\/div><\/div>

\t\t\t\n\t\t\t\t\t\t\t\t<\/path><\/svg>\n\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t<\/path><\/svg>\n\t\t\t\t\t\t\t<\/span>\n\t\t\tHow do I contact the Clearinghouse?<\/strong><\/span><\/div>

See their contact page<\/a> for more information.<\/p><\/div><\/div>

\t\t\t\n\t\t\t\t\t\t\t\t<\/path><\/svg>\n\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t<\/path><\/svg>\n\t\t\t\t\t\t\t<\/span>\n\t\t\tWill the College send periodic updates as it learns more?<\/strong><\/span><\/div>

We will advise current and\/or former students of anything definitive we learn from the Clearinghouse.\u00a0 We will post updates to this FAQ as we learn more and as we get questions from students and families.<\/p><\/div><\/div>

\t\t\t\n\t\t\t\t\t\t\t\t<\/path><\/svg>\n\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t<\/path><\/svg>\n\t\t\t\t\t\t\t<\/span>\n\t\t\tWho do I contact if I have questions?<\/strong><\/span><\/div>

So that we can track questions, we ask that you use this form<\/a>.\u00a0 We will try to respond as quickly as possible.<\/p><\/div><\/div><\/div>","protected":false},"excerpt":{"rendered":"

The National Student Clearinghouse (NSC), which processes student data on Wooster\u2019s behalf, is one of the institutions affected by the MOVEIt Transfer software vulnerability.\u00a0 Updates FAQ<\/p>\n","protected":false},"author":27,"featured_media":0,"parent":41565,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"_uag_custom_page_level_css":"","footnotes":""},"coauthors":[436],"class_list":["post-41533","page","type-page","status-publish","hentry"],"acf":[],"featured_image_urls":{"full":"","thumbnail":"","medium":"","medium_large":"","large":"","1536x1536":"","2048x2048":""},"post_excerpt_stackable":"

The National Student Clearinghouse (NSC), which processes student data on Wooster\u2019s behalf, is one of the institutions affected by the MOVEIt Transfer software vulnerability.\u00a0 Updates June 28, 2023 via emailIT Alert \u2013 National Student Clearinghouse Potential Security VulnerabilityRecent coverage in the national and technology media indicates many organizations in the US and globally have been affected by a significant security event involving the MOVEIt file transfer application.The College of Wooster does not use the MOVEIt application.\u00a0 However, the National Student Clearinghouse (NSC) which processes student data on Wooster\u2019s behalf, is one of the affected institutions.\u00a0 Yesterday afternoon the NSC informed…<\/p>\n","category_list":"","author_info":{"name":"Ellen Falduto","url":"https:\/\/inside.wooster.edu\/technology\/author\/efaldutowooster-edu\/"},"comments_num":"0 comments","uagb_featured_image_src":{"full":false,"thumbnail":false,"medium":false,"medium_large":false,"large":false,"1536x1536":false,"2048x2048":false},"uagb_author_info":{"display_name":"Ellen Falduto","author_link":"https:\/\/inside.wooster.edu\/technology\/author\/efaldutowooster-edu\/"},"uagb_comment_info":0,"uagb_excerpt":"The National Student Clearinghouse (NSC), which processes student data on Wooster\u2019s behalf, is one of the institutions affected by the MOVEIt Transfer software vulnerability.\u00a0 Updates FAQ","_links":{"self":[{"href":"https:\/\/inside.wooster.edu\/technology\/wp-json\/wp\/v2\/pages\/41533","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/inside.wooster.edu\/technology\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/inside.wooster.edu\/technology\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/inside.wooster.edu\/technology\/wp-json\/wp\/v2\/users\/27"}],"replies":[{"embeddable":true,"href":"https:\/\/inside.wooster.edu\/technology\/wp-json\/wp\/v2\/comments?post=41533"}],"version-history":[{"count":22,"href":"https:\/\/inside.wooster.edu\/technology\/wp-json\/wp\/v2\/pages\/41533\/revisions"}],"predecessor-version":[{"id":44225,"href":"https:\/\/inside.wooster.edu\/technology\/wp-json\/wp\/v2\/pages\/41533\/revisions\/44225"}],"up":[{"embeddable":true,"href":"https:\/\/inside.wooster.edu\/technology\/wp-json\/wp\/v2\/pages\/41565"}],"wp:attachment":[{"href":"https:\/\/inside.wooster.edu\/technology\/wp-json\/wp\/v2\/media?parent=41533"}],"wp:term":[{"taxonomy":"author","embeddable":true,"href":"https:\/\/inside.wooster.edu\/technology\/wp-json\/wp\/v2\/coauthors?post=41533"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}