A small number of current and past Indiana University students who have been impacted by a malfunction with an online tool that provides access to information including grade-point averages are receiving email notification this week about the unauthorized access to their personal grade information.
A tool deployed by the IU Bloomington Office of the Vice Provost for Undergraduate Education could have, in some circumstances, allowed IU users with valid computing account credentials to inappropriately view other students’ information.
In these cases, only individual student information including names of courses taken, course grades, course credit hours, semesters involved and GPAs were available via this tool. No other data such as Social Security numbers, national ID numbers, addresses or financial information was accessible.
When IU leaders learned of this unintentional access, the tool was immediately disabled.
The departmental tool (GPA Calculator) was initially deployed in late 2018 to enable authorized IU staff to access students’ information such as name of courses taken, course grades and various GPAs. Individual students could also access their own course information: names of courses taken, course grades, course credit hours, semesters involved and GPAs.
A dedicated team conducted an investigation of the tool and available forensic information and identified a software vulnerability.
A call center has been established to respond to questions from those impacted by the matter: 812-855-0080 or 833-516-0482 (toll free).
Any updates will be posted to the website of the Office of the Vice Provost for Undergraduate Education.
