Evergreen Public Schools

The Washington State Office of the Attorney General reported that Evergreen Public Schools experienced a data breach potentially affecting the personal information of 3,585 employees on October 12, 2020. The breach occurred due to unauthorized access to a district-issued email account with the incident discovered on September 24, 2020. The compromised information includes employee names and Social Security Numbers, with no evidence indicating the data was accessed by the unauthorized user.

Source: https://www.atg.wa.gov/data-breach-notifications | https://data.wa.gov/resource/sb4j-ca4h.json?id=10334

TPRM report: https://www.rankiteo.com/company/evergreen-school-district-114-foundation

"id": "eve502072725",
"linkid": "evergreen-school-district-114-foundation",
"type": "Breach",
"date": "9/2020",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'industry': 'Education',
                        'location': 'Washington State',
                        'name': 'Evergreen Public Schools',
                        'type': 'Educational Institution'}],
 'attack_vector': 'Unauthorized Access',
 'data_breach': {'number_of_records_exposed': 3585,
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Employee Names',
                                              'Social Security Numbers']},
 'date_detected': '2020-09-24',
 'date_publicly_disclosed': '2020-10-12',
 'description': 'The Washington State Office of the Attorney General reported '
                'that Evergreen Public Schools experienced a data breach '
                'potentially affecting the personal information of 3,585 '
                'employees on October 12, 2020. The breach occurred due to '
                'unauthorized access to a district-issued email account with '
                'the incident discovered on September 24, 2020. The '
                'compromised information includes employee names and Social '
                'Security Numbers, with no evidence indicating the data was '
                'accessed by the unauthorized user.',
 'impact': {'data_compromised': ['Employee Names', 'Social Security Numbers']},
 'initial_access_broker': {'entry_point': 'Email Account'},
 'post_incident_analysis': {'root_causes': 'Unauthorized Access to Email '
                                           'Account'},
 'references': [{'source': 'Washington State Office of the Attorney General'}],
 'title': 'Evergreen Public Schools Data Breach',
 'type': 'Data Breach',
 'vulnerability_exploited': 'Email Account Compromise'}