On May 22, 2019, the California Office of the Attorney General reported a data breach involving the Georgia Institute of Technology. The breach occurred between December 14, 2018, and March 22, 2019, potentially compromising names, addresses, Institute IDs, dates of birth, and Social Security numbers of affected individuals. Approximately UNKN individuals were affected, and the breach was attributed to unauthorized access to an internal database through a compromised web server.
Source: https://oag.ca.gov/ecrime/databreach/reports/sb24-147461
TPRM report: https://www.rankiteo.com/company/georgia-tech-research-institute
"id": "geo227072625",
"linkid": "georgia-tech-research-institute",
"type": "Breach",
"date": "12/2018",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"
{'affected_entities': [{'customers_affected': 'UNKN',
'industry': 'Education',
'location': 'Georgia, USA',
'name': 'Georgia Institute of Technology',
'type': 'Educational Institution'}],
'attack_vector': 'Unauthorized access to an internal database through a '
'compromised web server',
'data_breach': {'number_of_records_exposed': 'UNKN',
'personally_identifiable_information': True,
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['names',
'addresses',
'Institute IDs',
'dates of birth',
'Social Security numbers']},
'date_detected': '2019-03-22',
'date_publicly_disclosed': '2019-05-22',
'description': 'A data breach at the Georgia Institute of Technology '
'potentially compromised names, addresses, Institute IDs, '
'dates of birth, and Social Security numbers of affected '
'individuals.',
'impact': {'data_compromised': ['names',
'addresses',
'Institute IDs',
'dates of birth',
'Social Security numbers'],
'systems_affected': ['internal database', 'web server']},
'initial_access_broker': {'entry_point': 'compromised web server'},
'references': [{'date_accessed': '2019-05-22',
'source': 'California Office of the Attorney General'}],
'title': 'Georgia Institute of Technology Data Breach',
'type': 'Data Breach'}