If you are a college student, or were a college student, and you had a student loan, it’s time to worry. Officials of St. Paul-based Educational Credit Management Corp. revealed that an unencrypted portable device was stolen during the weekend of March 20-21. The Wall Street Journal reports, and thanks to kirniki on DLDB for the heads up.

On that unencrypted device? 3,300,000 names, addresses, Social Security numbers, and other personal data on borrowers. Over three million college students breached, one single device, no real security.

Officials say it was “a simple, old-fashioned theft” and “not a hacker incident.” Of course that’s of almost no consolation.

The list continues to grow. And of course, had the device been encrypted with patent-pending and NIST FIPS Level 2 certified MyLaptopGPS strong encryption, or any other decent encryption, there would be no issue here.