Following the discovery of the breach, the server was taken off-line and will not be restored to service until all sensitive data on it is encrypted, he said. For the moment, the health center has reverted to a paper system, he added.

The discovery of the latest compromise follows two others over the past few weeks. On April 21, a server containing patent data and intellectual property files belonging to the university's Technology Transfer Department was compromised. The university learned of the breach only after the FBI informed it that the system was tied to another case that the agency was investigating.

Three days later, university IT officials discovered that someone had hacked into an alumni database server containing personal and biographical information for more than 300,000 individuals and organizations. That incident resulted in the university's sending out fraud alert letters to 137,800 people whose Social Security numbers were stored on the system. Both incidents were publicly disclosed the week of May 1.

The incidents have prompted a sweeping audit of the university's security posture and will likely result in more breaches being found, Sams said.

"We have a 20-person team working on this seven days a week," Sams said. The university has signed on Atlanta-based Internet Security Systems to assist with the review, he said.