On February 21, 2024, the Vermont Office of the Attorney General reported a data breach involving EdisonLearning that took place between March 7, 2023, and March 17, 2023. An unauthorized actor accessed certain computer systems and downloaded files potentially impacting individual names and additional information. The breach has not resulted in known fraudulent misuse of the information, and the organization is offering credit monitoring services as a precaution.
Source: https://ago.vermont.gov/document/2024-02-21-edisonlearning-data-breach-notice-consumers
TPRM report: https://www.rankiteo.com/company/edisonlearning
"id": "edi537072725",
"linkid": "edisonlearning",
"type": "Breach",
"date": "3/2023",
"severity": "50",
"impact": "2",
"explanation": "Attack limited on finance or reputation"
{'affected_entities': [{'industry': 'Education',
'name': 'EdisonLearning',
'type': 'Organization'}],
'attack_vector': 'Unauthorized Access',
'data_breach': {'data_exfiltration': True,
'personally_identifiable_information': True,
'type_of_data_compromised': ['Individual Names',
'Additional Information']},
'date_detected': '2024-02-21',
'date_publicly_disclosed': '2024-02-21',
'description': 'Unauthorized actor accessed computer systems and downloaded '
'files potentially impacting individual names and additional '
'information.',
'impact': {'data_compromised': ['Individual Names', 'Additional Information']},
'references': [{'date_accessed': '2024-02-21',
'source': 'Vermont Office of the Attorney General'}],
'threat_actor': 'Unauthorized Actor',
'title': 'EdisonLearning Data Breach',
'type': 'Data Breach'}