<?xml version="1.0" encoding="UTF-8"?>
<incident>
  <arrest type="boolean">false</arrest>
  <breach-type-id type="integer" nil="true"></breach-type-id>
  <comments-count type="integer">2</comments-count>
  <data-family-id type="integer">1</data-family-id>
  <data-recovered type="boolean">false</data-recovered>
  <disputed type="boolean">false</disputed>
  <fringe type="boolean">false</fringe>
  <fringe-description nil="true"></fringe-description>
  <id type="integer">1568</id>
  <lawsuit type="boolean">false</lawsuit>
  <records type="integer">45</records>
  <submission-id type="integer">541</submission-id>
  <updated-at type="datetime">2009-02-19T06:41:00Z</updated-at>
  <user-id type="integer">1</user-id>
  <breach-types type="array">
    <breach_type>
      <name>Web</name>
    </breach_type>
  </breach-types>
  <data-types type="array">
    <data_type>
      <short_name>SSN</short_name>
    </data_type>
    <data_type>
      <short_name>NAA</short_name>
    </data_type>
    <data_type>
      <short_name>MISC</short_name>
    </data_type>
  </data-types>
  <timeline-items type="array">
    <timeline_item>
      <first_date>2009-01-21 09:58:00 UTC</first_date>
      <type>Incident discovered by organization</type>
    </timeline_item>
    <timeline_item>
      <first_date>2009-01-30 00:00:00 UTC</first_date>
      <type>Organization reports incident</type>
    </timeline_item>
  </timeline-items>
  <vector>
    <name>Outside</name>
  </vector>
  <primary-organization>
    <business-type-id type="integer">2</business-type-id>
    <freebase-cached-data type="yaml" nil="true"></freebase-cached-data>
    <freebase-description nil="true"></freebase-description>
    <freebase-pref-name nil="true"></freebase-pref-name>
    <id type="integer">810</id>
    <is-private type="boolean" nil="true"></is-private>
    <name>Kansas State University</name>
    <stock-symbol nil="true"></stock-symbol>
    <updated-at type="datetime">2008-07-14T22:20:38Z</updated-at>
  </primary-organization>
  <secondary-organizations type="array"/>
  <summary>
    <summary>Names, Social Security numbers and grades of students exposed on website</summary>
  </summary>
  <comments type="array">
    <comment>
      <content>How is this incident any different than a state or local government making recorded documents available online to the general public? One is legal the other is not, but the risk to the public is the same. You should consider reporting those as threats too.</content>
      <created_at>2009-01-30 09:37:53 UTC</created_at>
    </comment>
    <comment>
      <content>Anonymous:  We do, quite a bit:

http://datalossdb.org/search?breach_type%5B%5D=Web&amp;direction=desc&amp;order=reported_date&amp;org_type%5B%5D=Gov
</content>
      <created_at>2009-01-30 11:12:29 UTC</created_at>
    </comment>
  </comments>
  <location>
    <address>Manhattan, KS, USA</address>
    <thoroughfare_name></thoroughfare_name>
    <dependent_locality_name></dependent_locality_name>
    <locality_name>Manhattan</locality_name>
    <sub_administrative_area_name></sub_administrative_area_name>
    <administrative_area_name>KS</administrative_area_name>
    <postal_code_number></postal_code_number>
    <country_name_code>US</country_name_code>
    <longitude>39.1929</longitude>
    <latitude>-96.5984</latitude>
    <accuracy>4</accuracy>
  </location>
</incident>

