Due to the weather, some customers may experience late delivery of The Roanoke Times. We apologize for the delay.
The students' Social Security numbers were printed on mailing labels from a third-party vendor.
Thursday, July 18, 2013
The Social Security numbers of 18,700 University of Virginia students appeared on the address labels of health insurance brochures mailed across the country in the latest in a string of breaches at the state's flagship university.
The school provided the numbers along with other information to Aetna Health Care, which sent open-enrollment brochures to students' homes through a third-party mail vendor, officials said.
The digits appear above students' names but are not identified as Social Security numbers, said Andrew Elliott, a student who received the brochure.
"It's definitely easily visible if you know what you're looking for," said Elliott, an editor at the school newspaper, the Cavalier Daily , which broke the story Wednesday afternoon. "It isn't separated by the little dashes, but it still looks like a Social Security number."
School officials learned of the error last week.
"The university certainly regrets that this exposure occurred," university spokesman McGregor McCance said in an email. "The university is in the process of notifying students whose information was exposed."
Elliott said he had not been notified.
Officials said they didn't know whether anyone at Aetna or the university saw the mailers before they were sent. Aetna spokeswoman Cynthia Michener said the insurer learned of the breach earlier this week. Aetna provides student health insurance at UVa among 195 schools across the U.S.
Michener said she could not provide details on the mailing process and she didn't know how many mailers the insurer sends each year. She declined to identify the mail vendor, one of several she said Aetna uses.
"We are working with UVa helping to notify the students," Michener said. "We are trying to do the right thing."
Some UVa students were more amused than troubled Wednesday.
"Dude, you only have one job," fourth-year student Hilde Franklin said in a text message, referring to the sender of the brochure.
Another fourth-year student, Jon Stumpf, alluded to possible identity theft.
"I couldn't be happier with the new moped I just bought in India," he said.
The school will provide students with free credit monitoring, McCance said.
"Our focus is on notifying those affected, providing them information regarding credit monitoring and assistance and ensuring that such an incident will not occur again," McCance said.
Such an incident has occurred at UVa before.
UVa in 2008 announced what it called "a comprehensive initiative to phase out" use of Social Security numbers.
"Although [Social Security numbers] must be collected for selected business functions ... the university will be altering other business functions to use university ID numbers in place, wherever possible," the university said.
That plan was to be completed by last year.
Weather JournalIce threat may grow into Sun PM