A while ago, I filed a Freedom of Information request with McHenry County College with regard to the security breach by software vendor Ellucian.
Among other things, I asked for documents that would tell how many student and employee records were compromised.
Pretty straightforward question.
Here’s the response I received to that question:
“The College has redacted certain documents containing information about the number of persons affected by the data release, as that information is prohibited from disclosure by the Illinios Personal information Protection Act, 815 ILCS 530/10(a).”
I recently received a letter from Advocate Medical Group saying that my personal records might have been compromised because they were contained on one of four stolen computers.
Advocate made it known that 4.2 million records were involved.
Take a look at the July 18th email from MCC IT head Al Butler to Ellucian’s Silvio Vano:
The question obviously arises as to why Advocate was willing to reveal its number of people affected and McHenry County College is not.