August 30, 2019 – The Tennessee Higher Education Commission (THEC) announced today that no student information was compromised when unauthorized server access occurred on a state vendor's system last month.

THEC Executive Director Mike Krause said: “Immediately after determining a possible breach had occurred, our agency, working with the website vendor and the Tennessee Bureau of Investigation (TBI), launched an inquiry focused on ensuring Tennessee students' privacy. Of course, we are relieved that the inquiry indicated no student data was taken, and want to thank the TBI, the Attorney General and the state's Strategic Technology Solutions team for their assistance throughout this process.”

On July 17, Graduation Alliance, the state vendor that provides data and web-hosting support for, notified THEC that unauthorized access might have happened due to unusual server traffic. The data housed on the impacted servers contained some Tennessee student information but did not include any Social Security numbers, financial, driver's license, or health information.
After receiving notification from the vendor, THEC began a collaborative investigation in concert with all state agency stakeholders and the vendor.
Upon completion of the forensic investigation, conclusive results indicate that no student information was exposed and that a technical breach of the data did not occur.

Students may resume the use of the website for college and career planning in September. THEC has established a toll-free number that students and parents may call 800-342-1663 for additional information.

About the Tennessee Higher Education Commission

The Tennessee Higher Education Commission was created in 1967 by the Tennessee General Assembly. The Commission develops, implements, and evaluates postsecondary education policies and programs in Tennessee while coordinating the state's higher education systems and is relentlessly focused on increasing the number of Tennesseans with a postsecondary credential.

Source: Press Release
Date: Friday, August 30, 2019
Contact: Jessica Powers