Georgia Tech said Wednesday the origins of the data breach that potentially impacted an estimated 1.3 million current and former students and employees has been traced back to as early as December.

The world-renowned school, which offers computer science degrees, has said, though, it didn't discover the breach until March 21. Tech disclosed the breach Tuesday.

"We have determined that an outside party leveraged a vulnerability in a web application," Georgia Tech said in a weblink listing frequently asked questions about the breach.

A Georgia Tech spokeswoman said Wednesday the school has not determined who committed the breach. The school is currently not granting interview requests.

» MORE: How to prevent ID theft

Georgia Tech offered some details Wednesday through the weblink about how they discovered the breach. Application developers noticed “a significant performance impact” in one of its web applications and began an investigation. During this investigation, they determined the performance issue was the result of a breach.

The exposed information may include names, addresses, Social Security numbers and birthdates, officials said. The school is coordinating with credit monitoring agencies to determine what protections will be offered.

Georgia Tech said the vulnerable web application has been patched, and it’s checking for any additional online vulnerabilities.

About the Author

Keep Reading

Kiley King, an 11th grader who attended Parklane Elementary School in East Point reacts to the Fulton County Board of Education’s vote to close the elementary school on Thursday, Feb 20, 2025. Parents, teachers, students and community members filled the public comment time asking to keep Parklane and Spalding Drive elementary schools open. (Jenni Girtman for The Atlanta Journal-Constitution)

Credit: Jenni Girtman

Featured

State Rep. Matt Reeves, R-Duluth, introduces himself while attending an AAPI mental health event at Norcross High School on Sunday, Aug. 11, 2024. (Ben Gray for the AJC)

Credit: Ben Gray