The Victorian Education Department experienced a data breach after accidentally posting private and sensitive information on children who were homeschooled on their website.
The contact information of certain parents as well as information identifying pupils who experienced medical issues and personal traumas like bullying at school were made public.
The Department investigated the incident and took immediate action to take the submissions down.
TPRM report: https://scoringcyber.rankiteo.com/company/detvic
"id": "dep115528822",
"linkid": "detvic",
"type": "Breach",
"date": "04/2017",
"severity": "100",
"impact": "",
"explanation": "Attack threatening the organization's existence"{'affected_entities': [{'industry': 'Education',
'location': 'Victoria, Australia',
'name': 'Victorian Education Department',
'type': 'Government Department'}],
'attack_vector': 'Accidental Data Exposure',
'data_breach': {'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Personal Information',
'Medical Information']},
'description': 'The Victorian Education Department experienced a data breach '
'after accidentally posting private and sensitive information '
'on children who were homeschooled on their website. The '
'contact information of certain parents as well as information '
'identifying pupils who experienced medical issues and '
'personal traumas like bullying at school were made public. '
'The Department investigated the incident and took immediate '
'action to take the submissions down.',
'impact': {'data_compromised': ['Contact information of parents',
'Information identifying pupils with medical '
'issues and personal traumas']},
'investigation_status': 'Investigated',
'post_incident_analysis': {'root_causes': ['Accidental Publication']},
'response': {'containment_measures': ['Taking down the submissions']},
'title': 'Data Breach at Victorian Education Department',
'type': 'Data Breach'}