Dear NYU Intramural Participant:

We are writing because personal information about you, including your social
security number, was recently posted on the web.

The University became aware of this matter when we heard from other members
of the NYU community who found their names and social security numbers
posted on a web site: http://osiris.978.org/~brianr/mirrors.  The owner of
the site is:

brian@ristuccia.com
[previous telephone number and address redacted. I don't live there anymore]

Apparently, Mr. Ristuccia was able to access data from NYU's athletics
department.  Your information was part of a list of individuals interested
in participating in intramural sports; the computer application in which the
information was stored has been fixed to prevent further unauthorized
access.

The University deeply regrets that this unfortunate situation has occurred,
and we are taking the following steps:

* The University's legal staff has contacted Comcast, the host server;
Google; and the site's owner, and has demanded that the file and all indexed
references to it be taken down.

* We are exploring what legal action the University can take to remove
unauthorized personal information from the web.

* Google has responded, indicating it would remove the indexed references
to the file at http://osiris.978.org/~brianr/mirrors.

* The site's owner has responded, but refuses to remove the information
from his website.  Instead, he has replaced his first copy of the file with
a new file, which separates the names and the social security numbers.  He
continues to publish your name and email address at
http://osiris.978.org/~brianr/nyu-publication/. NYU will continue to pursue
the matter with this individual with the goal of having all the information
removed.

We believe it would be helpful if, in addition to the University's efforts,
you would contact Mr. Ristuccia, Comcast, and Google directly yourself to
register complaints that your personal information is being made available
to the general public at http://osiris.978.org/~brianr/nyu-publication/
without your authorization via their facilities and demand that such
information be removed from the web.  You may contact Comcast at
http://www.comcast.net/memberservices/contactus/contact_us.jsp and Google at
abuse@google.com

We realize that in these times many people have understandable concerns
about personal privacy and identity theft.  The Federal Trade Commission has
a website that provides information on steps you can take to address the
threat of identity theft: http://www.consumer.gov/idtheft/index.html.  We
urge you to visit this site and take the actions recommended.

The University will continue to pursue whatever avenues are available to us
to address this situation and, again, deeply regrets any impact this may
have on you.

If you would like to obtain a credit report at no cost to you through NYU,
please contact NYU Information Technology Services (ITS) at (212) 998 - 2300
or its.reply@nyu.edu.  Please also contact ITS with any questions you may
have.

Sincerely,

Marc Wais
Vice President for Student Affairs

Marilyn McMillan
Associate Provost &
Chief Information Technology Officer