University Reports Data Breach

March 31, 2015

Bradley University has reported a breach of personally identifiable information that may affect current employees and their family members.

An internal investigation conducted over the last several days discovered malware (malicious software) on two University computers containing personal identifiable information. The malware may have captured personal information including social security numbers for unauthorized use. The University has received reports from employees indicating fraudulent tax return filings.

The identified malware has been deactivated. A team of Computing Services staff members and external experts, including the FBI and the IRS - Criminal Division, are investigating the situation and are helping ensure the data systems are secure.

Bradley employees have been encouraged to monitor their personal financial accounts and credit reports for irregular activity. The University is committed to assisting with this effort and is offering employees a one-year subscription to an identification protection and credit monitoring service. A number of resources have been made available to assist those affected and are available online at bradley.edu/databreach. Bradley also has set up a resource call center to assist those affected.

The University takes the security of all data within its systems very seriously and apologizes for the breach. Each year campus systems are subject to a confidential security audit by outside professionals and repeatedly have received excellent ratings. The University will continue to be vigilant in its efforts to secure data systems.