Baltimore County Public Schools

"The public website of Baltimore County Public Schools (BCPS) was found containing a major security flaw that exposed highly sensitive information on students and staff members.

Anyone with login credentials was able to access the personal information of other students and staff members, as well as certain sensitive school records.

A total of around 11,400 students, parents, and staff members, who have access to the platform could view these records.

It was not known for how long the records have been exposed through the platform and whether any unauthorized party gained access to it.

Source: https://cyware.com/news/baltimore-county-schools-found-exposing-highly-sensitive-information-on-students-and-staff-members-232c733f

TPRM report: https://scoringcyber.rankiteo.com/company/baltimore-county-public-schools

"id": "bal31026323",
"linkid": "baltimore-county-public-schools",
"type": "Data Leak",
"date": "06/2019",
"severity": "85",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'customers_affected': 11400,
                        'industry': 'Education',
                        'location': 'Baltimore County, Maryland',
                        'name': 'Baltimore County Public Schools',
                        'type': 'Educational Institution'}],
 'attack_vector': 'Unauthorized Access',
 'data_breach': {'number_of_records_exposed': 11400,
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Personal Information',
                                              'Sensitive School Records']},
 'description': 'The public website of Baltimore County Public Schools (BCPS) '
                'was found containing a major security flaw that exposed '
                'highly sensitive information on students and staff members. '
                'Anyone with login credentials was able to access the personal '
                'information of other students and staff members, as well as '
                'certain sensitive school records. A total of around 11,400 '
                'students, parents, and staff members, who have access to the '
                'platform could view these records. It was not known for how '
                'long the records have been exposed through the platform and '
                'whether any unauthorized party gained access to it.',
 'impact': {'data_compromised': ['Personal Information',
                                 'Sensitive School Records'],
            'systems_affected': ['Public Website']},
 'title': 'Baltimore County Public Schools Website Data Exposure',
 'type': 'Data Exposure',
 'vulnerability_exploited': 'Major Security Flaw in Website'}