Baltimore City Public Schools

Baltimore City Public Schools experienced a cybersecurity incident affecting certain IT systems within their network. This breach may have compromised certain documents containing information of current and former employees, volunteers, and contractors as well as a small percentage of students. It is speculated that folders, files, or records containing social security numbers, driver's license numbers, or passport numbers were stolen. Also, possibly exposed were a combination of student data, call logs, absenteeism records, or the maternity status of currently enrolled students. The breach has been linked to the Cloak ransomware operation.

Source: https://www.bleepingcomputer.com/news/security/baltimore-city-public-schools-data-breach-affects-over-31-000-people/

TPRM report: https://scoringcyber.rankiteo.com/company/baltcityschools

"id": "bal759042625",
"linkid": "baltcityschools",
"type": "Breach",
"date": "4/2025",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'industry': 'Education',
                        'location': 'Baltimore, Maryland',
                        'name': 'Baltimore City Public Schools',
                        'type': 'Educational Institution'}],
 'data_breach': {'personally_identifiable_information': ['Social Security '
                                                         'numbers',
                                                         "Driver's license "
                                                         'numbers',
                                                         'Passport numbers'],
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Social Security numbers',
                                              "Driver's license numbers",
                                              'Passport numbers',
                                              'Student data',
                                              'Call logs',
                                              'Absenteeism records',
                                              'Maternity status']},
 'description': 'Baltimore City Public Schools experienced a cybersecurity '
                'incident affecting certain IT systems within their network. '
                'This breach may have compromised certain documents containing '
                'information of current and former employees, volunteers, and '
                'contractors as well as a small percentage of students. It is '
                'speculated that folders, files, or records containing social '
                "security numbers, driver's license numbers, or passport "
                'numbers were stolen. Also, possibly exposed were a '
                'combination of student data, call logs, absenteeism records, '
                'or the maternity status of currently enrolled students. The '
                'breach has been linked to the Cloak ransomware operation.',
 'impact': {'data_compromised': ['Social Security numbers',
                                 "Driver's license numbers",
                                 'Passport numbers',
                                 'Student data',
                                 'Call logs',
                                 'Absenteeism records',
                                 'Maternity status'],
            'systems_affected': 'Certain IT systems within their network'},
 'ransomware': {'ransomware_strain': 'Cloak'},
 'threat_actor': 'Cloak ransomware operation',
 'title': 'Baltimore City Public Schools Cyber Incident',
 'type': 'Ransomware'}