Details of 160K current and former Metro State students exposed in data breach


A data breach at Metropolitan State University in St. Paul exposed the personal information of 160,000 students past and present.

The university announced Tuesday the result of its investigation into the hack revealed in January, saying names, dates of birth, home addresses, phone numbers, GPA information, email addresses and, in some cases, the last four digits of social security numbers were exposed.

Of those affected, 25,000 are current students (enrolled in the past three years), while the remainder are older students.

No financial, credit card or banking information was accessed by the hackers, while 11,000 students had the last four digits of their social security numbers exposed.

"We regret this incident and sincerely apologize to those impacted," said Devinder Malhotra, interim president. "Since learning of this intrusion, our IT team has disabled the vulnerability that permitted the breach and replaced the affected server. The university also completed additional security measures to minimize future security risks."

Students with their social security digits compromised will be notified by letter, while the rest will be told via email, the university's website and through media coverage. They will be offered identity-protection services by the university.

The U.S. Secret Service began investigating what was then a suspected breach in mid-December, when someone gained unauthorized access to MSU's server which contained details of faculty, staff and students.

The Star Tribune reports the social security numbers of 900 faculty members had been exposed by the breach.

The newspaper says that university officials were notified about the hack after someone, reportedly an Australian teenager, appeared to claim responsibility after boasting about it on a blog site.

Next Up

protest, chauvin, george floyd

Walz: Demobilization of troops, police to happen 'as quickly as possible'

It's unclear just when troops and police will pull out of the Twin Cities.

Screen Shot 2021-04-20 at 5.33.13 PM

'The first step towards justice': AG Ellison calls for change after Chauvin conviction

Ellison's office led the prosecution of the former Minneapolis police officer.


Derek Chauvin guilty on all counts in George Floyd's death

Chauvin was charged with second-degree murder, third-degree murder and second-degree manslaughter.

Screen Shot 2021-04-20 at 4.13.07 PM

LIVE UPDATES: Reaction as Derek Chauvin is found guilty on all counts

We bring you the latest reaction after the verdict in the Derek Chauvin trial.

Derek Chauvin

Watch live: Verdict in Derek Chauvin murder trial

The verdict will be announced between 3:30 p.m. and 4 p.m. Tuesday, April 20.

derek chauvin court - closing arguments

Verdict reached in Derek Chauvin murder trial

A verdict will be read Tuesday afternoon.

logan olson gofundme

18-month-old boy who nearly drowned welcomed home with police escort

Logan Olson was found in a retention pond in Stewartville on April 7.

covid, vaccine

Is Minnesota's latest surge plateauing? Expert says 'no idea'

Hospital admissions have leveled off in the past week, though ICU cases have risen.


Children's Minnesota - Minneapolis campus

Thousands of MN hospital patients' information possibly exposed in data breach

One of Children's Minnesota's vendors experienced a ransomware attack in July.