Archive for Wednesday, February 25, 2009

Burglars accessed and stole a laptop from Steamboat Springs School District Finance Director Dale Mellor's office by breaking the lock on a conference room door Tuesday night at the school district's business office. School officials think a spreadsheet containing the Social Security numbers for 10 years worth of school district employees was on the laptop.

Photo by Matt Stensland

Burglars accessed and stole a laptop from Steamboat Springs School District Finance Director Dale Mellor's office by breaking the lock on a conference room door Tuesday night at the school district's business office. School officials think a spreadsheet containing the Social Security numbers for 10 years worth of school district employees was on the laptop.

Stolen computer contained 1,300 Social Security numbers

Ten years worth of data on laptop stolen from school district offices

Advertisement

— Ten years worth of Social Security numbers for 1,300 past and present employees was compromised Tuesday night when a laptop was stolen from the Steamboat Springs School District office.

The laptop of District Finance Director Dale Mellor was the only item of value stolen from the offices at the George P. Sauer Human Services Center on Seventh Street. On the laptop, Mellor had a spreadsheet containing the Social Security numbers and names of their owners. The spreadsheet was created as part of a requirement from a past district audit.

The laptop was password-protected, but district officials are warning their employees to be on the lookout for any potential identity theft.

"We have been giving them the three credit agency Web sites and phone numbers," Superintendent Shalee Cunningham said.

Steamboat Springs High School science teacher Cindy Gay said she notified her bank and set up a fraud alert with the credit agencies by Wednesday afternoon.

As a former victim of identity theft, Gay said she knew it could be a long process to correct potential damage.

"Going through all the reporting was long and painful," she said. "It would be much easier to be proactive than reactive."

Gay's credit card information was stolen from a hotel in Washington, D.C., in 2000. It was more than a year later when mysterious charges appeared on her bill. Gay ultimately did not lose any money in the identity theft.

Cunningham said Mellor also used the laptop to access the district's financial database and direct-deposit system. That system contains bank information for all employees in the district but is protected by a firewall, she said.

"Ultimately with his computer, they could get into the network and cause havoc," she said. "(But) we don't have any reason to believe they have a way to get into that."

She said district staff have been watching the network today and have not yet seen any attempts to access the database. The school district's directory lists 312 current employees.

The district contacted all current employees, but about two-thirds of the individuals on the list no longer work in the district. Cunningham said the district plans to advertise and create a database to notify past employees of the breach.

According to Colorado law, if a private entity has a breach of security, they are required to notify anyone affected by the breach. Because the school district is not a private entity, that law does not apply. But Cunningham said that as a precaution, she sent an e-mail to all staff Wednesday morning advising them to check their financial records.

"JD Paul from the police department has asked that all of us scrutinize all credit accounts and bank accounts to be sure they have not been jeopardized," she wrote.

Burglary

Officer JD Paul, of the Steamboat Springs Police Department, said five interior doors were damaged at the district offices, where he said the laptop was stolen some time between 7 p.m. Tuesday and 5 a.m. Wednesday.

The office of the financial director for the Northwest Colorado Board of Cooperative Educational Services, housed in the same building, also was burglarized. A blank deposit book was stolen from the BOCES office.

Jane Toothaker, executive director of BOCES, said the doors to the main office, the financial office and a supply closet were broken.

"There wasn't anything in there that they would be able to use for anything," she said.

Paul said he suspects the burglars were not students trying to make a mess because the closet contained buckets of paint that were not disturbed.

The financial office has no sign outside the door, Toothaker said, yet none of the other offices were disturbed.

"I don't know if they would have been looking for petty cash, but that's in our safe," she said.

Police this morning found no apparent point of entry into the building, but Cunningham said she suspects a door facing Eighth Street leading into the gymnasium was left unlocked last night. A tool like a crowbar apparently was used to pry open interior doors.

"We took some evidence from some of the doors. We got some good fingerprints from some of them," Paul said. "It looked like they were probably in a hurry. : There are a lot of valuable things they could have taken."

- To reach Zach Fridell, call 871-4208

or e-mail zfridell@steamboatpilot.com

Comments

forthekids (anonymous) says...

This is absurd! 10 years worth of Social Security numbers for 1,300 past and present employees from a past audit stored on a laptop with only the computer being password protected. Why wasn't the spreadsheet destroyed after the audit? So much for the grreat Citrix server that keeps all of the schools' documentation protected. I just don't get the stupidity of the district! Aren't SS numbers suppose to be kept under lock and key and not with the associated names?

February 25, 2009 at 8:27 p.m. ( | suggest removal )

forthekids (anonymous) says...

Especially with the door left unlocked.

February 26, 2009 at 9:24 p.m. ( | suggest removal )

justice4all (anonymous) says...

May be we can get an explanation as to why it was not in the safe. Sounds like a job done by someone that knew exactly where to look.

February 26, 2009 at 7:37 p.m. ( | suggest removal )

aichempty (anonymous) says...

If the door was unlocked, then we have nothing to worry about. Anyone dumb enough to do that much damage (see the photo with the article) to an unlocked door poses no threat of identify theft.

February 27, 2009 at 9:22 a.m. ( | suggest removal )

jk (anonymous) says...

The door going outside was unlocked aich the doors inside were all locked.

February 27, 2009 at 10:24 a.m. ( | suggest removal )

marthalee (anonymous) says...

After all the well-publicized security breaches via thefts of laptop computers, you'd think someone in the school district would have noticed and changed their procedures. Rob Douglas made some excellent recommendations in his column. Let's hope that Superintendent Cunningham does more than just consider them. Good luck school employees!!

February 27, 2009 at 7:10 a.m. ( | suggest removal )

Post a comment (Requires free registration)

Posting comments requires a free account and verification.

Return to top of page