The Ohio Attorney General's Office reported a data breach involving Lourdes University on July 9, 2021. The breach, which occurred between May 17, 2021, and June 9, 2021, involved unauthorized access to a Microsoft Teams folder containing student names and social security numbers, with three students accessing the file without authorization. The total number of affected individuals is unknown.
TPRM report: https://www.rankiteo.com/company/association-of-franciscan-colleges-and-universities
"id": "ass240080425",
"linkid": "association-of-franciscan-colleges-and-universities",
"type": "Breach",
"date": "5/2021",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"{'affected_entities': [{'industry': 'Education',
'location': 'Ohio, USA',
'name': 'Lourdes University',
'type': 'Educational Institution'}],
'attack_vector': 'Unauthorized Access',
'data_breach': {'personally_identifiable_information': True,
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Student Names',
'Social Security Numbers']},
'date_detected': '2021-07-09',
'date_publicly_disclosed': '2021-07-09',
'description': "The Ohio Attorney General's Office reported a data breach "
'involving Lourdes University on July 9, 2021. The breach, '
'which occurred between May 17, 2021, and June 9, 2021, '
'involved unauthorized access to a Microsoft Teams folder '
'containing student names and social security numbers, with '
'three students accessing the file without authorization. The '
'total number of affected individuals is unknown.',
'impact': {'data_compromised': ['Student Names', 'Social Security Numbers'],
'systems_affected': 'Microsoft Teams'},
'initial_access_broker': {'entry_point': 'Microsoft Teams'},
'references': [{'date_accessed': '2021-07-09',
'source': "Ohio Attorney General's Office"}],
'threat_actor': 'Students',
'title': 'Data Breach at Lourdes University',
'type': 'Data Breach',
'vulnerability_exploited': 'Access Control'}