Yikes. I would bet that some heads are rolling in the UVA IT department right now. I mean... c'mon. There are so many tools to prevent/detect stuff like this available, it's really inexcusable to let something like this run on for so long...

"The hack, which is believed to have gone undetected for two years, netted details on over 6,000 staff who had taught at the university from 1990 to August 2003."