GEMS Education

The largest education operator in the UAE, Gems Education, suffered a cyberattack that disrupted some of its operations.

The attack compromised the identification documents, financial information, such as payment history, data related to creditworthiness, health or medical records, and log-in details of the students.

Gem Education involved third-party expertise to investigate the incident and implement response plans and secure the systems.

Source: https://www.thenationalnews.com/business/technology/2022/02/24/dubai-based-gems-education-hit-by-cyber-attack/

TPRM report: https://scoringcyber.rankiteo.com/company/gems-education

"id": "gem23267522",
"linkid": "gems-education",
"type": "Cyber Attack",
"date": "02/2022",
"severity": "90",
"impact": "5",
"explanation": "Attack threatening the organization's existence"

{'affected_entities': [{'customers_affected': 'Students',
                        'industry': 'Education',
                        'location': 'UAE',
                        'name': 'Gems Education',
                        'size': 'Large',
                        'type': 'Education Operator'}],
 'data_breach': {'personally_identifiable_information': 'identification '
                                                        'documents',
                 'type_of_data_compromised': ['identification documents',
                                              'financial information',
                                              'payment history',
                                              'data related to '
                                              'creditworthiness',
                                              'health or medical records',
                                              'log-in details']},
 'description': 'The largest education operator in the UAE, Gems Education, '
                'suffered a cyberattack that disrupted some of its operations. '
                'The attack compromised identification documents, financial '
                'information, such as payment history, data related to '
                'creditworthiness, health or medical records, and log-in '
                'details of the students. Gems Education involved third-party '
                'expertise to investigate the incident and implement response '
                'plans and secure the systems.',
 'impact': {'data_compromised': ['identification documents',
                                 'financial information',
                                 'payment history',
                                 'data related to creditworthiness',
                                 'health or medical records',
                                 'log-in details'],
            'operational_impact': 'disrupted some of its operations'},
 'response': {'recovery_measures': 'Implement response plans and secure the '
                                   'systems',
              'third_party_assistance': 'Involved third-party expertise'},
 'title': 'Cyberattack on Gems Education',
 'type': 'Cyberattack'}