A recent audit found the state's Education Department was storing sensitive personal data in plaintext format and not updating its software.

OSU officials say the data of 636 students, prospective students and family members was exposed to hackers engineering a phishing attack.

Though the education sector faces similar threats seen elsewhere, its challenge is balancing essential flexibility with sound security practices.

It's the second major security breach the university has seen in the past 12 months.

Inside cultures that are designed to be collaborative and open, IT leaders are struggling to corral their users and educate faculty on network risks.

Phishing emails to employees at several school districts in Monterey County, California, have exposed Social Security numbers and medical records.

The district's superintendent has notified parents of students at Orchard Views High School that some academic data had been accessed and changed.

A spreadsheet mistakenly sent to 297 new students contains personal and academic information of every applicant to the school's fall master's program.

Commentary: The new law fills a longstanding policy gap for colleges and universities everywhere, says security consultant Joanna Lyn Grama.