"The University of California at Berkeley started warning students and alumni on Friday that online thieves infiltrated the school's restricted servers and stole medical records on more than 160,000 individuals.

The database exposed by the breach held information on UC Berkeley's students, alumni and staff, including health insurance information and Social Security numbers, the university said in a statement. The breach lasted from October 9, 2008 to April 9, 2009 (corrected), when campus administrators performing maintenance on the systems detected the intrusion. Early evidence uncovered in the investigation suggests the attack came from overseas and accessed the secured databases by compromising a public Web site run on the same server."

Read more: http://www.securityfocus.com/brief/960