A student in the Gates Chili Central School District was charged as an adult after allegedly hacking into the account of the former superintendent.
It is alleged the defendant hacked into the account of former superintendent Kimberle Ward, retrieved her password and gained access to grade point documents, discipline records and other personal information.
The student was accused of identify theft and unlawfully accessing district information on two separate occasions.
In a letter to parents, the school district said no private information taken or copied, but it may have been viewed.
It was also found that there were multiple students involved in this matter.
Source: https://13wham.com/news/local/gates-chili-students-accused-of-hacking-into-district
TPRM report: https://scoringcyber.rankiteo.com/company/gateschiliinfo
"id": "gat121719323",
"linkid": "gateschiliinfo",
"type": "Data Leak",
"date": "05/2019",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"{'affected_entities': [{'industry': 'Education',
'location': 'Gates Chili, New York',
'name': 'Gates Chili Central School District',
'type': 'Educational Institution'}],
'attack_vector': 'Account Compromise',
'data_breach': {'personally_identifiable_information': ['Potential exposure '
'of PII'],
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Grade point documents',
'Discipline records',
'Other personal information']},
'description': 'A student in the Gates Chili Central School District was '
'charged as an adult after allegedly hacking into the account '
'of the former superintendent Kimberle Ward, retrieving her '
'password, and gaining access to grade point documents, '
'discipline records, and other personal information.',
'impact': {'data_compromised': ['Grade point documents',
'Discipline records',
'Other personal information'],
'identity_theft_risk': ['Potential identity theft']},
'initial_access_broker': {'entry_point': 'Account Compromise',
'high_value_targets': ["Former Superintendent's "
'Account']},
'regulatory_compliance': {'legal_actions': ['Student charged as an adult']},
'response': {'communication_strategy': ['Letter to parents']},
'threat_actor': 'Student',
'title': "Student Hacks Into Former Superintendent's Account",
'type': 'Unauthorized Access'}