A security incident has occurred which affected a large number of US schools, students, and their parents.
There’s a sudden wave of notifications of a breach sent to the parents of students of about 150 School Districts in the United States.
The common denominator in all of the cases was the use of the “Aeries” online student information system and an online portal.
Someone gained unauthorized access to their systems back in November 2019, and accessed student and parent information stored there.
Information compromised included Parent's full name, Student's full name, Home address, Phone number, Email address, and Hashed password.
Source: https://www.technadu.com/aeries-software-breached-over-150-school-districts-compromised/103869/
TPRM report: https://scoringcyber.rankiteo.com/company/aeries-technology-solutions-private-limited
"id": "aer21559123",
"linkid": "aeries-technology-solutions-private-limited",
"type": "Breach",
"date": "11/2019",
"severity": "25",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': '150 School Districts',
'industry': 'Education Technology',
'location': 'United States',
'name': 'Aeries',
'type': 'Company'}],
'attack_vector': 'Unauthorized Access',
'data_breach': {'personally_identifiable_information': ["Parent's full name",
"Student's full name",
'Home address',
'Phone number',
'Email address'],
'type_of_data_compromised': ["Parent's full name",
"Student's full name",
'Home address',
'Phone number',
'Email address',
'Hashed password']},
'description': 'A security incident has occurred which affected a large '
'number of US schools, students, and their parents. There’s a '
'sudden wave of notifications of a breach sent to the parents '
'of students of about 150 School Districts in the United '
'States. The common denominator in all of the cases was the '
'use of the “Aeries” online student information system and an '
'online portal. Someone gained unauthorized access to their '
'systems back in November 2019, and accessed student and '
'parent information stored there. Information compromised '
"included Parent's full name, Student's full name, Home "
'address, Phone number, Email address, and Hashed password.',
'impact': {'data_compromised': ["Parent's full name",
"Student's full name",
'Home address',
'Phone number',
'Email address',
'Hashed password'],
'systems_affected': ['Aeries online student information system',
'Online portal']},
'title': 'Data Breach Affecting US Schools Using Aeries Student Information '
'System',
'type': 'Data Breach'}