Elizabethtown College

The Maine Office of the Attorney General reported a data breach involving Elizabethtown College on December 2, 2021. The breach was discovered on November 2, 2021, and contained sensitive data including names and Social Security numbers of 645 individuals, with 6 Maine residents affected. The breach occurred between February 2019 and November 2021 due to inadequate security of files saved in a shared folder on the College’s network.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/3bf9fb06-ef80-4b37-b739-b8a85db040c2.shtml

TPRM report: https://www.rankiteo.com/company/elizabethtown-college-ib

"id": "eli456072925",
"linkid": "elizabethtown-college-ib",
"type": "Breach",
"date": "2/2019",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'customers_affected': 645,
                        'industry': 'Education',
                        'name': 'Elizabethtown College',
                        'type': 'Educational Institution'}],
 'attack_vector': 'Inadequate security of files saved in a shared folder',
 'data_breach': {'number_of_records_exposed': 645,
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Names',
                                              'Social Security numbers']},
 'date_detected': '2021-11-02',
 'date_publicly_disclosed': '2021-12-02',
 'description': 'The Maine Office of the Attorney General reported a data '
                'breach involving Elizabethtown College on December 2, 2021. '
                'The breach was discovered on November 2, 2021, and contained '
                'sensitive data including names and Social Security numbers of '
                '645 individuals, with 6 Maine residents affected. The breach '
                'occurred between February 2019 and November 2021 due to '
                'inadequate security of files saved in a shared folder on the '
                'College’s network.',
 'impact': {'data_compromised': ['Names', 'Social Security numbers']},
 'post_incident_analysis': {'root_causes': 'Inadequate security of files saved '
                                           'in a shared folder'},
 'references': [{'date_accessed': '2021-12-02',
                 'source': 'Maine Office of the Attorney General'}],
 'title': 'Data Breach at Elizabethtown College',
 'type': 'Data Breach',
 'vulnerability_exploited': 'Inadequate security measures'}