Investigation Finds Troyer Responsible for Sending Emails

Here is a statement released by the University of Illinois about the investigation into a series of anonymous e-mails sent to the University's Senates Conference

An investigation was completed by outside experts for the University of Illinois into a pair of anonymous emails sent to members of the University's academic senates conference, in connection with an enrollment management initiative. Conducted by Jones Day and Duff & Phelps, the investigation concluded there was no evidence of "hacking" or vulnerabilities in the network and concluded that the emails were drafted on and sent from the laptop of the former chief of staff to the president, and that the laptop was in her possession at the time the emails were created and sent.

The two anonymous emails were sent on December 12 and an inquiry was launched later that day to ascertain the source and whether the University's information technology security was compromised. That inquiry was led by the University IT department. The incident was later reported to the University Ethics Office, which consulted with the IT department and assumed control of the investigation, assisted by the University's chief legal counsel. On December 22, the president approved the use of outside experts to assist in the investigation. External legal counsel Jones Day was retained, who engaged forensic data analyst Duff & Phelps to conduct an independent forensic analysis.

In a final report released today, which was based on a comprehensive forensic examination of emails and computers, and interviews with relevant personnel, the investigative team drew the following conclusions:

- The emails were composed and sent from the University laptop computer of Lisa Troyer. Examination of browser activity, firewall logs, email headers and email fragments found on the Troyer laptop all support this conclusion. Troyer resigned her administrative post as chief of staff to President Michael J. Hogan effective immediately on Jan. 4.

- The investigative record does not support a conclusion that any other person, including Hogan, knew that Troyer intended to send or had sent the anonymous emails.

- Troyer's laptop computer was not improperly accessed and was in her possession at the time the anonymous emails were sent. There is no evidence of hacking or vulnerabilities in the University network. Hogan thanked the investigative team for its comprehensive and expeditious work in a four-week period that included the year-end holiday season, and expressed his disappointment in the events.

"The investigative team has made a thorough examination of the facts on which to base its conclusions. This was a disappointing event, and we have taken the necessary steps to address it," Hogan said.

On December 12, 2011, two anonymous emails were sent to 20 members of the University of Illinois Senates Conference (USC). Both emails were identified in the text as having been written by an unnamed senator, and the address from which the emails were sent, aboutintegrity@yahoo.com, did not identify a specific individual as the sender. One of the recipients noticed embedded data in the email indicated that it was created on a computer with the user account of "troyer." This was quickly brought to the attention of the University IT department, the University ethics department, and the subsequent investigation ensued.

Investigators reviewed more than 3,500 emails from Troyer's University email account from the month of December, and additional emails from the fall, which contained key search words. Troyer voluntarily supplied access to her personal gmail account and records of calls to and from her cell phone. Troyer, President Hogan and others were interviewed, and Duff & Phelps performed a rigorous forensic analysis of the hard drive of Troyer's laptop, examining Internet activity, browser history records and deleted material. They were able to verify that "the system's firewall was functioning normally" ... and the "activity found on the network security systems was consistent with activity found on the Troyer laptop."

U of I Board of Trustees Chair Christopher G. Kennedy said that the "misguided attempt by one individual to sway opinion" must not distract the University community from important work around the enrollment management initiative.

"This is an unfortunate incident and a personal, ethical lapse which the President moved swiftly to investigate," said Kennedy. "There is no relationship between this incident and good work being done on key initiatives, like the enrollment management plan, which is the result of months of research, hard work and consultation with faculty groups and others. The Board and the administration have made great progress toward improving this essential function, addressing concerns as they have been expressed. This important work will continue, unhindered."

Troyer served as the President's chief of staff since July 2010. Troyer also holds an appointment as a tenured professor of psychology in the College of Liberal Arts and Sciences on the Urbana campus and plans to transition to back to teaching and research.