Fauquier County Public Schools

On September 9, 2023, Fauquier County Public Schools (FCPS) fell victim to a ransomware attack, leading to a data breach reported by the Maine Office of the Attorney General on October 18, 2023. The incident compromised the personal information of 13,919 individuals, though only 2 residents of Maine were confirmed as affected. The breach exposed sensitive data, prompting FCPS to offer two years of free identity theft protection services via Experian IdentityWorks to mitigate risks for those impacted. The attack disrupted school operations and raised concerns over the security of student, staff, and administrative records, including potential exposure of personally identifiable information (PII). While the full scope of the stolen data remains undisclosed, the involvement of ransomware suggests attackers may have encrypted critical systems and demanded payment for decryption. The breach underscores vulnerabilities in the school district’s cybersecurity infrastructure, particularly against targeted ransomware campaigns that exploit public sector entities. FCPS has not confirmed whether the attackers successfully exfiltrated data before encryption or if the breach led to fraudulent use of the exposed information. However, the proactive offering of credit monitoring indicates a recognition of significant risk to affected individuals, including potential identity theft or financial fraud.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/18c75359-7517-4016-830d-010b917714d3.shtml

TPRM report: https://www.rankiteo.com/company/fauquier-county-public-schools

"id": "fau1016090725",
"linkid": "fauquier-county-public-schools",
"type": "Ransomware",
"date": "9/2023",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization’s existence"

{'affected_entities': [{'customers_affected': 13919,
                        'industry': 'education',
                        'location': 'Fauquier County, Virginia, USA',
                        'name': 'Fauquier County Public Schools',
                        'type': 'educational institution'}],
 'customer_advisories': ['Identity theft protection services (Experian '
                         'IdentityWorks) offered for two years'],
 'data_breach': {'number_of_records_exposed': 13919,
                 'personally_identifiable_information': True},
 'date_detected': '2023-09-09',
 'date_publicly_disclosed': '2023-10-18',
 'description': 'The Maine Office of the Attorney General reported a data '
                'breach involving Fauquier County Public Schools on October '
                '18, 2023. The breach, which occurred on September 9, 2023, '
                'was due to a ransomware attack, potentially affecting 13,919 '
                'individuals, with only 2 residents identified. Identity theft '
                'protection services through Experian IdentityWorks are being '
                'offered for two years.',
 'impact': {'data_compromised': True, 'identity_theft_risk': True},
 'references': [{'date_accessed': '2023-10-18',
                 'source': 'Maine Office of the Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': ['Maine Office of the '
                                                        'Attorney General']},
 'response': {'third_party_assistance': ['Experian IdentityWorks (identity '
                                         'theft protection services)']},
 'title': 'Fauquier County Public Schools Ransomware Attack and Data Breach',
 'type': 'ransomware attack, data breach'}