Georgia Institute of Technology disclosed a security incident where an unauthorized party accessed an internal database via a web server. Access occurred between Dec 14, 2018, and Mar 22, 2019. Affected data included names, addresses, Institute IDs, DOBs, and SSNs. Georgia Tech engaged forensic firms, secured the server, and offered one year of credit monitoring via ID Experts. The incident was reported to the U.S. Department of Education.