Second lawsuit filed against school in UCF data breach

ORLANDO, Fla. — A former UCF men's basketball manager filed the second lawsuit this month over the computer hack in which 63,000 Social Security numbers of former and current students and employees were stolen.
 
Jeremiah Hughley, a former and student and manager of the men's basketball team at the University of Central Florida, said the school's handling of people's private information was "lackadaisical, cavalier, reckless, or at the very least, negligent."

FAQ: UCF Data Breach
 
The lawsuit, which seeks more than $15,000, accuses the university of not doing enough to help the victims and prompting Hughley to buy additional identity theft protection at his own expense.
 
Hughley's bank account was drained once his personal information was compromised, according to the lawsuit.
 
The lawsuit said the breach occurred because the university did not follow best practices and industry standards by keeping information unencrypted as well as improperly handling and storing the information.
 
UCF announced on Feb. 4 that there had been a security breach involving private information for student government leaders, student athletes, and current and former employees dating back to the 1980s.
 
The FBI's Jacksonville office is investigating and has not said how the lapse occurred.
 
Officials said the school first discovered the problem on Jan. 8, but waited nearly a month to report the problem publicly while it determined the full extent of the breach.
 
The school set up a call center and promised one year of free credit monitoring and identity-protection services.
 
UCF President John Hitt called for the university to review its procedures and online systems in the aftermath. FBI officials reached out to schools across the country to look for other potential victims.
 
UCF officials and John Yanchunis, Hughley's attorney, could not be reached for comment.
 
Two UCF alumni filed the first lawsuit on Feb. 5.