Front Rush

The company Front Rush exposed information.

It exposed a server containing more than 700,000 files to the open internet, including college athletes' medical records, performance reports, driver licenses, and other personal information.

Items exposed included students' SAT scores, personal addresses, dates of birth, physical evaluations, post-injury reports, performance reviews from specific teams for particular players, and athletic financial aid agreements.

Source: https://www.vice.com/en/article/g5xggy/front-rush-college-athlete-recruiting-software-exposed-medical-information-grades

TPRM report: https://scoringcyber.rankiteo.com/company/frontrush

"id": "fro159121222",
"linkid": "frontrush",
"type": "Data Leak",
"date": "01/2020",
"severity": "85",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'industry': 'Software',
                        'name': 'Front Rush',
                        'type': 'Company'}],
 'attack_vector': 'Exposed Server',
 'data_breach': {'number_of_records_exposed': '700,000',
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Medical records',
                                              'Performance reports',
                                              'Driver licenses',
                                              'SAT scores',
                                              'Personal addresses',
                                              'Dates of birth',
                                              'Physical evaluations',
                                              'Post-injury reports',
                                              'Performance reviews',
                                              'Athletic financial aid '
                                              'agreements']},
 'description': 'Front Rush exposed a server containing more than 700,000 '
                "files to the open internet, including college athletes' "
                'medical records, performance reports, driver licenses, and '
                'other personal information.',
 'impact': {'data_compromised': ['Medical records',
                                 'Performance reports',
                                 'Driver licenses',
                                 'SAT scores',
                                 'Personal addresses',
                                 'Dates of birth',
                                 'Physical evaluations',
                                 'Post-injury reports',
                                 'Performance reviews',
                                 'Athletic financial aid agreements']},
 'title': 'Front Rush Data Exposure Incident',
 'type': 'Data Breach'}