As you might imagine, when I learned that McHenry County College software vendor Ellucian had sent Social Security numbers and other personal information to three junior colleges which MCC refused to identify (but you can discover here), I thought you ought to know how many records were at risk.
The college would not provide the number of students and employees, present and past, that were affected by the security breach.
Here is the reason used by MCC to hide the information:
“The College has redacted certain documents containing information about the number of persons affected by the data release, as that information is prohibited from disclosure by the lllinois Personal information Protection Act, 815 ILCS 530/10(a).”
I have appealed that denial to the Public Access Division of the Illinois Attorney General’s Office.
Then I got the idea of asking for documents concerning postage used to mail the letters.
That request resulted in what you see below. It shows the letters were sent by bulk mail and cost $4,700.
Let’s assume the college would use the cheapest postage rate, which is 13.5 cents apiece for carrier route sorted mail having a required minimum per route (3.5 cents more if the minimum is not met).
Dividing $4,700 by 13.5 cents yields 34,814.8.
So, 34,814 is the maximum number of people affected by the potential identity theft problem.
I informed the college yesterday morning of that figure and invited them to provide the correct number.
So far I have received no reply.
Eventually I will get it and share it with you.
As a post script, remember that Advocate Medical Group released the number of records contained on its four stolen computers.