Documents on a network storage device were left unencrypted and available on the network for a month and a half . The device had been decrypted and reset to factory settings in order to troubleshoot a problem . It would only be accessed on the internal network . It contained student loan documents from students who attended MSU in 2006 . The information included names , DOB , SSN . ;