British Columbia

UBC students warned software glitch may have exposed personal info

The University of British Columbia is warning students about a nearly two-year old software glitch that may have exposed students' personal information.
UBC is just now warning students of a two-year-old computer bug that may have exposed personal information. (iStock)

The University of British Columbia is warning students about a nearly two-year old software glitch that may have exposed students' personal information.

In an email sent to students, UBC staff say the bug in its Student Service Centre (SCC) dates back to a software update made in November 2012. The university says it remained undetected until September of this year since it was rarely triggered.  

The bug would cause one user's information to be displayed to the next user.

"The risk that you have been affected by this bug is extremely low," said Kate Ross, UBC's registrar in the notice sent to students.

"Even if you have been affected, the consequences are minimal," said the note. "Nonetheless, we believe that it is our responsibility to keep you informed of such matters." 

UBC says the bug was fixed within 48 hours of it being found.

Ross says according to the university's calculations, the bug was triggered in one out of 1000 transactions.

"Even if you were among the one in a thousand who may have been affected by this bug, the only information that could have been seen by another user was your Electronic Fund Transfer (EFT) information (account holder name, financial institution number, transit number, and account number)" said Ross.

She notes it is not enough information to let someone access another's bank account.

Ross says UBC has notified B.C.'s Information and Privacy Commissioner, but does not wish to raise students' concerns too much.

"UBC IT [Information Technology] actively monitors its major software systems for reliability and security," said Ross.

"This bug has been rectified and we have confirmed that no similar bugs exist elsewhere in the system.  We are confident in the reliability and security of the SSC and want to reassure you that your personal information is well-protected by the University," she says.

Students who are concerned are asked to check their recent bank transactions and visit UBC's IT webpage

Comments

To encourage thoughtful and respectful conversations, first and last names will appear with each submission to CBC/Radio-Canada's online communities (except in children and youth-oriented communities). Pseudonyms will no longer be permitted.

By submitting a comment, you accept that CBC has the right to reproduce and publish that comment in whole or in part, in any manner CBC chooses. Please note that CBC does not endorse the opinions expressed in comments. Comments on this story are moderated according to our Submission Guidelines. Comments are welcome while open. We reserve the right to close comments at any time.