The Georgia Institute of Technology (Georgia Tech) exposes about 1.3 Million Institute's Personal Records via a Web Application.

Georgia Tech, The Georgia Institute of Technology, has notified the university community about a massive  data breach. The breach / data theft exposed personal information of 1.3 million current and former faculty members, students, staff and as well as student applicants.
The breach was discovered by the Application developers for the Institute when they noticed a significant performance impact in one of its web applications. The investigation discovered on March 21, 2019, the performance issue was the result of a security incident.
Georgia Tech has provided a portal the manage the breach but the information is lacking due to still ongoing investigation.

Visit the portal if you are or have been affiliated with the University.

Georgia Tech discovered that unauthorized access to a web application has exposed personal information for up to 1.3 million individuals, including current and former faculty, students, staff, and student applicants. The Institute’s cybersecurity team is working to determine the extent of the access and to identify the affected individuals.

The information illegally accessed by an unknown outside entity was located on a central database. Georgia Tech’s cybersecurity team is conducting a thorough forensic investigation to determine precisely what information was extracted from the system, which may include names, addresses, social security numbers, and birth dates.

Georgia Tech learned of the illegal access in late March and immediately took action to address the vulnerability. The Institute is committed to the privacy and security of its personal data and deeply regrets the potential impact on those affected.

The U.S. Department of Education and University System of Georgia (USG) have been notified. The Institute and USG hope to have more information soon, including how to determine who has been affected and next steps.

We continue to investigate the extent of the data exposure and will share more information as it becomes available. We apologize for the potential impact on the individuals affected and our larger community. We are reviewing our security practices and protocols and will make every effort to ensure that this does not happen again.