Clark University in Massachusetts notified some students whose personal information, including Social Security Numbers had been accessed.
An unauthorized individual could have accessed the employee’s email account.
University had no evidence of any misuse of the personal information.
The number of students affected by the attack was not disclosed.
Source: https://www.databreaches.net/clark-university-notifies-students-of-phishing-incident/
TPRM report: https://scoringcyber.rankiteo.com/company/clark-university
"id": "cla02101122",
"linkid": "clark-university",
"type": "Data Leak",
"date": "07/2018",
"severity": "50",
"impact": "2",
"explanation": "Attack limited on finance or reputation"{'affected_entities': [{'industry': 'Education',
'location': 'Massachusetts',
'name': 'Clark University',
'type': 'Educational Institution'}],
'attack_vector': 'Phishing or Email Compromise',
'data_breach': {'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Social Security Numbers',
'Personal Information']},
'description': 'Clark University in Massachusetts notified some students '
'whose personal information, including Social Security Numbers '
'had been accessed. An unauthorized individual could have '
'accessed the employee’s email account. University had no '
'evidence of any misuse of the personal information. The '
'number of students affected by the attack was not disclosed.',
'impact': {'data_compromised': ['Social Security Numbers',
'Personal Information'],
'identity_theft_risk': 'Potential',
'systems_affected': ['Email Account']},
'initial_access_broker': {'entry_point': 'Email Account'},
'response': {'communication_strategy': ['Notified affected students']},
'threat_actor': 'Unauthorized Individual',
'title': 'Clark University Email Account Breach',
'type': 'Data Breach'}