Examples of Reportable Security Incidents

• A laptop computer containing private data is lost or stolen. (Loss)
• A University employee abuses the access they have to private data for their job to look at private data not related to their job, for personal or other reasons or simple curiosity. (Inappropriate Use)
• An instructor posts grades outside his/her classroom in a manner in which a student can be personally identified (i.e., alphabetically) or by a piece of private data (i.e., SSN or student ID number). (Inappropriate disclosure)
• A room that houses computers that store private data is left unattended and unlocked.
• An attacker runs an exploit tool to gain access to a University server's password file. (Unauthorized Access)
• A worm uses open file shares to infect from one to hundreds of desktop and laptop computers within the University. (Malicious Code)