Date: 08 May 2007
Incident Type: Security Breach
WASC Threat Classification: SQL Injection

A report within the help desk system used to track the status of open service calls created a file that was a accessible to everyone. A hacker abused the problem to get information regarding 22,000 current and former students.

References:

• Hacker accessed data at University of Missouri [MSNBC]
• One-at-a-time hacker grabs 22,000 IDs from Univ. of Missouri [Computerworld]
• May 2007 Security Incident [University of Missouri]