Around 10,000 records held by the British Council were leaked in a third-party data breach.
The data included full names, email addresses, student IDs, enrollment dates, and the duration of study of students from around the world.
They advised every affected individual to change the passwords immediately and keep a lookout for suspicious-looking emails or links.
Source: https://portswigger.net/daily-swig/british-council-data-breach-leaks-10-000-student-records
TPRM report: https://scoringcyber.rankiteo.com/company/british-council
"id": "bri1275222",
"linkid": "british-council",
"type": "Breach",
"date": "12/2021",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': '10,000',
'industry': 'Education',
'location': 'Global',
'name': 'British Council',
'type': 'Educational Organization'}],
'attack_vector': 'Third-Party',
'data_breach': {'number_of_records_exposed': '10,000',
'personally_identifiable_information': ['Full names',
'Email addresses',
'Student IDs',
'Enrollment dates',
'Duration of study'],
'type_of_data_compromised': ['Personal Information',
'Educational Records']},
'description': 'Around 10,000 records held by the British Council were leaked '
'in a third-party data breach. The data included full names, '
'email addresses, student IDs, enrollment dates, and the '
'duration of study of students from around the world. They '
'advised every affected individual to change the passwords '
'immediately and keep a lookout for suspicious-looking emails '
'or links.',
'impact': {'data_compromised': ['Full names',
'Email addresses',
'Student IDs',
'Enrollment dates',
'Duration of study']},
'response': {'remediation_measures': ['Password change advisory',
'Alert on suspicious emails']},
'title': 'British Council Third-Party Data Breach',
'type': 'Data Breach'}