BU and SAGE CDL Driver Training notify students of data exposure

BLOOMSBURG—Bloomsburg University of Pennsylvania and SAGE Truck Driving Schools are notifying CDL (Commercial Driver’s License) Driver Training program current and former students, instructors and applicants about the possible exposure of their personal data that was contained on computers at the training facility in Berwick, Pa.  SAGE partners with Bloomsburg University to offer the driver programs, though SAGE staff are not Bloomsburg University employees and the students of the driver programs are not Bloomsburg University students. The computers did not contain information of any former or current Bloomsburg University students.

During a routine service visit on Sept. 15, 2017, Bloomsburg University technical staff discovered what appeared to be remotely installed malware on two computers at the facility.  The computers were immediately turned off and their network connectivity disabled. The computers are not part of the Bloomsburg University network. 

Forensic examination by University personnel verified that the computers were accessible to outside entities and that documents on the computers contained SAGE student, instructor and applicant names and other personal information. The multi-step process to determine if personal data was accessed required in excess of 50 hours of IT personnel time.

“We are in the process of contacting everyone whose name and Social Security numbers were listed on these documents,” said Tom Fletcher, vice-president of strategic enrollment management and dean of extended programs. “We are providing them free credit monitoring services for one year with one of the three major credit bureaus.”  

“While we go to great lengths to secure our systems and protect sensitive data, no organization is ever 100 percent immune to hacker threats,” added Fletcher. “We plan to conduct a thorough review of the incident and based on the findings, we will take appropriate measures to reduce the risk of a similar incident occurring in the future.”

Affected individuals may direct questions to Karen White at 570-389-5004 or cdl@bloomu.edu.

Bloomsburg University is one of 14 universities in Pennsylvania’s State System of Higher Education. The university serves approximately 9,600 students, offering comprehensive programs of study in the colleges of Education, Business, Liberal Arts and Science and Technology.