HCI College

The Vermont Office of the Attorney General disclosed a data breach at HCI College, where unauthorized actors gained access to its network on May 17, 2023. The incident exposed personal information of individuals, though the exact number of affected parties and the specific types of compromised data (e.g., names, Social Security numbers, financial records, or medical details) remain undisclosed. The breach was formally reported on October 25, 2023, nearly five months after the initial intrusion, raising concerns about delayed detection or notification. While the full scope of the exposure is unclear, the incident highlights vulnerabilities in the college’s cybersecurity defenses, potentially leaving students, faculty, or staff at risk of identity theft, fraud, or other malicious exploitation. The lack of transparency regarding the compromised data further complicates risk assessment for those impacted.

Source: https://ago.vermont.gov/document/2023-10-25-hci-college-data-breach-notice-consumers

TPRM report: https://www.rankiteo.com/company/health-career-institutefl

"id": "hea010091825",
"linkid": "health-career-institutefl",
"type": "Breach",
"date": "5/2023",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'industry': 'Education',
                        'name': 'HCI College',
                        'type': 'Educational Institution'}],
 'data_breach': {'type_of_data_compromised': 'Personal Information'},
 'date_detected': '2023-05-17',
 'date_publicly_disclosed': '2023-10-25',
 'description': 'The Vermont Office of the Attorney General reported that HCI '
                'College experienced a data breach involving unauthorized '
                'access to its network on May 17, 2023. The breach potentially '
                'exposed personal information; however, the exact number of '
                'individuals affected and the specific types of information '
                'involved are unknown.',
 'impact': {'data_compromised': 'Personal Information (unspecified)'},
 'references': [{'source': 'Vermont Office of the Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': 'Vermont Office of the '
                                                       'Attorney General'},
 'title': 'HCI College Data Breach',
 'type': 'Data Breach'}