Frequently asked questions (SA)

• What do I need to do if I think my personal information has been exposed?
• How do I access the free credit monitoring the University is providing?
• Who was affected?
• What personally identifiable information was stored on the hard drive?
• Why did the University have my data?
• Are these data files still residing in the Office of Student Affairs?
• If my information was among the compromised data, does this mean that I'm a victim of identity theft?
• How will I know if any of my personal information was used by someone else?
• What is the University doing to protect personal information now?
• What steps are you taking to improve the security of personal information on campus computers?
• Will the University Contact me?
• Who do I contact?



Q: What do I need to do if I think my personal information has been exposed?

A: At this time we have no evidence that your personal data has been misused. As a precaution, however, you may want to place a fraud alert on your credit reporting accounts. You can do this free of charge through the three credit bureaus: Experian, Equifax and TransUnion. A fraud alert lets creditors know to contact you before opening new accounts, which protects you against the possibility that someone could open an account in your name without your knowledge.

Credit Bureau Information

Equifax, 888-766-0008,

Experian, 888-397-3742  

TransUnion, 800-680-7289 


Q: How do I access the free credit monitoring the University is providing?

A: Georgetown is finalizing the arrangements with Experian to make 12 months of free credit monitoring services available to individuals impacted by this incident. As soon as those details are confirmed we will post updated information here and send it via hard mailing.  The letter sent to you will include a unique identifier number for you to reference when contacting Experian for your free credit monitoring service. 

Q: Who was affected?

A: Approximately 38,000 current and former students, faculty and staff from 1998 through 2006. Of those impacted, approximately 7,700 are current students from the Main, Medical and Law Center campuses. 26,000 are Georgetown alumni, and 600 are current or former faculty and staff. The balance have a combination of multiple student, staff or other affiliations.

Q: What personally identifiable information was stored on the hard drive?

A: The personally identifiable information stored on the hard drive included names, addresses, and Social Security Numbers (SSNs). Neither financial account numbers, including bank and credit card numbers, nor health records were on the drive.

Q: Why did the University have my data?

A: The University’s Office of Student Affairs maintains student fee data on students from all three Center campuses (Main, Law, Medical). 

Q: Are these data files still residing in the Office of Student Affairs?

A: The data files in the Office of Student Affairs have been destroyed. A copy of the files, for investigative purposes, is secured and maintained in the security office.

Q: If my information was among the compromised data, does this mean that I'm a victim of identity theft?

A: Not necessarily. The fact that someone may have had access to your information doesn't mean you are a victim of identity theft or that the intruder intended to commit fraud or otherwise make any use of the information. We wanted to let you know about the incident so that you can take appropriate steps to protect yourself, if you are concerned.

Q: How will I know if any of my personal information was used by someone else?

A: The best way to find out if someone has gained access to your information is to obtain your credit reports from the three major credit bureaus (Equifax, Experian and TransUnion). If you notice accounts on your credit report that you did not open or applications for credit ("inquiries") that you did not make, these could be indications that someone else is using your personal information, without your permission.

Q: What is the University doing to protect personal information now?

A: The University Information Services department is leading a number of efforts to secure personally identifiable information. These efforts include a Departmental Risk Assessment program and a Secure Laptop and Secure Computing Environment program. We are also scanning faculty and staff PCs and laptops for this type of information and eliminating it completely where its use is not absolutely necessary. This department is also enhancing information security awareness efforts across the University community, empowering all faculty and staff to be vigilant in protecting personal and sensitive information on their computers. We also stress the importance of using the University’s NetID identification code in lieu of personally identifiable information.


Q: What steps are you taking to improve the security of personal information on campus computers?

A: Georgetown University continues to take information security very seriously, and diligently works to ensure that all of our policies and procedures adhere to industry standards and best practices with regards to data and personal information in university information systems. Like most major research institutions, we are redoubling our efforts to assure that all protected information in university information systems is managed in a secure manner. The university will continue to aggressively pursue these efforts.

Q: Will the University Contact me?

A: Individuals whose data may have been compromised will be notified by the University via letter. Georgetown will not call individuals regarding this issue, and the University will never ask for your full SSN, credit card or bank information. Do not release personally identifiable information in response to any conversations related to this incident if you did not initiate contact.

Please be aware that Georgetown will only contact you with information regarding steps you should take to prevent possible fraud or identity theft; or if you ask us, by e-mail or telephone, for information. We will not ask for your full SSN. We will not ask for credit card or bank information. We recommend that you do not release personal information in response to any contacts of this nature that you have not initiated.

Q: Who do I contact?

If you believe that you may be affected by this incident, call the 24 hour toll-free hotline, 1-866-740-2458. You may also reach us by e-mail at identity@georgetown.edu. In all e-mail correspondence, never include your SSN or date of birth.

Updated January 28, 2008.