Cleveland Metropolitan School District

An unknown and unauthorized individual accessed employee, student, and guardian information contained in a limited number of CMSD employee email accounts at the Cleveland Metropolitan School District computer network.

The compromised information includes name, Social Security number, driver’s license number, medical record number, and medical history.

They investigated the incident and took steps to further enhance the security of their systems to better protect against future incidents of this kind.

Source: https://www.databreaches.net/cleveland-metropolitan-school-district-discloses-phishing-related-incident/

TPRM report: https://scoringcyber.rankiteo.com/company/cleveland-municipal-school-district

"id": "cle231431822",
"linkid": "cleveland-municipal-school-district",
"type": "Data Leak",
"date": "03/2017",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'industry': 'Education',
                        'location': 'Cleveland, Ohio',
                        'name': 'Cleveland Metropolitan School District',
                        'type': 'Educational Institution'}],
 'attack_vector': 'Email Account Compromise',
 'data_breach': {'personally_identifiable_information': ['Name',
                                                         'Social Security '
                                                         'number',
                                                         'Driver’s license '
                                                         'number'],
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Personally Identifiable '
                                              'Information',
                                              'Medical Information']},
 'description': 'An unknown and unauthorized individual accessed employee, '
                'student, and guardian information contained in a limited '
                'number of CMSD employee email accounts at the Cleveland '
                'Metropolitan School District computer network. The '
                'compromised information includes name, Social Security '
                'number, driver’s license number, medical record number, and '
                'medical history.',
 'impact': {'data_compromised': ['Name',
                                 'Social Security number',
                                 'Driver’s license number',
                                 'Medical record number',
                                 'Medical history'],
            'systems_affected': 'Email accounts'},
 'response': {'remediation_measures': ['Enhanced the security of their '
                                       'systems']},
 'threat_actor': 'Unknown and unauthorized individual',
 'title': 'Unauthorized Access to Cleveland Metropolitan School District Email '
          'Accounts',
 'type': 'Data Breach'}