Downingtown Area School District

The Downingtown Area School District discovered a data breach that have damaged its servers and resulted in the hacking of dozens of students' personal information.

The system was hacked, according to district officials, by a kid. They claim that the breach has been stopped and that the data on the kids was not changed in any manner.

According to authorities, a student employed coding techniques to enter the Naviance student site. The website offers advice for pupils making post-high school plans.

The hacker had access to a variety of sensitive data, including student identification numbers, grade point averages, addresses, phone numbers, genders, and ethnicities, according to a school district official.

Source: https://www.cbsnews.com/philadelphia/news/downingtown-area-school-district-data-breach-hacked-student-water-gun-fight/

TPRM report: https://scoringcyber.rankiteo.com/company/downingtown-area-school-district

"id": "dow72814423",
"linkid": "downingtown-area-school-district",
"type": "Breach",
"date": "10/2019",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'customers_affected': 'Dozens of students',
                        'industry': 'Education',
                        'name': 'Downingtown Area School District',
                        'type': 'Educational Institution'}],
 'attack_vector': 'Unauthorized Access',
 'data_breach': {'number_of_records_exposed': 'Dozens',
                 'personally_identifiable_information': ['student '
                                                         'identification '
                                                         'numbers',
                                                         'addresses',
                                                         'phone numbers',
                                                         'genders',
                                                         'ethnicities'],
                 'type_of_data_compromised': ['student identification numbers',
                                              'grade point averages',
                                              'addresses',
                                              'phone numbers',
                                              'genders',
                                              'ethnicities']},
 'description': 'The Downingtown Area School District discovered a data breach '
                'that damaged its servers and resulted in the hacking of '
                "dozens of students' personal information.",
 'impact': {'data_compromised': ['student identification numbers',
                                 'grade point averages',
                                 'addresses',
                                 'phone numbers',
                                 'genders',
                                 'ethnicities'],
            'systems_affected': ['Naviance student site']},
 'initial_access_broker': {'entry_point': 'Naviance student site'},
 'post_incident_analysis': {'root_causes': 'Coding techniques to enter the '
                                           'Naviance student site'},
 'threat_actor': 'Student',
 'title': 'Downingtown Area School District Data Breach',
 'type': 'Data Breach',
 'vulnerability_exploited': 'Coding techniques to enter the Naviance student '
                            'site'}