Deakin University

The personal information of 46,980 Deakin University students was stolen in a data breach incident.

An attacker used a staff member's username and password to access student information via one of Deakin's third-party providers, who then used 9,997 Deakin students' information in an SMS phishing campaign, with victims prompted to make payment for a fraudulent postal delivery.

Deakin sincerely apologized to those impacted and assured victims of conducting a thorough investigation into the attack.

Source: https://ia.acs.org.au/article/2022/deakin-university-data-breach-impacts-47-000-students.html

TPRM report: https://scoringcyber.rankiteo.com/company/deakin-university

"id": "dea3929722",
"linkid": "deakin-university",
"type": "Breach",
"date": "07/2022",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"

{'affected_entities': [{'customers_affected': 46980,
                        'industry': 'Education',
                        'name': 'Deakin University',
                        'type': 'Educational Institution'}],
 'attack_vector': 'Phishing',
 'data_breach': {'data_exfiltration': True,
                 'number_of_records_exposed': 46980,
                 'personally_identifiable_information': True,
                 'type_of_data_compromised': ['Personal Information']},
 'description': 'The personal information of 46,980 Deakin University students '
                'was stolen in a data breach incident. An attacker used a '
                "staff member's username and password to access student "
                "information via one of Deakin's third-party providers, who "
                "then used 9,997 Deakin students' information in an SMS "
                'phishing campaign, with victims prompted to make payment for '
                'a fraudulent postal delivery. Deakin sincerely apologized to '
                'those impacted and assured victims of conducting a thorough '
                'investigation into the attack.',
 'impact': {'data_compromised': ['Personal Information']},
 'initial_access_broker': {'entry_point': 'Compromised Credentials'},
 'investigation_status': 'Ongoing',
 'motivation': 'Financial Gain',
 'title': 'Deakin University Data Breach',
 'type': 'Data Breach',
 'vulnerability_exploited': 'Compromised Credentials'}