Hebron Academy

Hebron Academy, an educational institution based in Maine, suffered a data breach due to hacking incidents between February 7, 2020, and May 20, 2020, as reported by the Maine Office of the Attorney General on February 1, 2021. The breach compromised Social Security Numbers (SSNs) of 187 individuals, including 103 Maine residents, exposing them to potential identity theft risks. While the exact method of the hack was not detailed, the breach involved unauthorized access to sensitive personal data. In response, Hebron Academy offered 24 months of credit monitoring and identity theft protection services through CyberScout to affected individuals. The incident highlights vulnerabilities in the institution’s cybersecurity defenses, particularly in safeguarding personally identifiable information (PII). The exposure of SSNs—critical for financial and identity verification—poses long-term risks, including fraud, unauthorized credit applications, and other forms of identity theft. The breach did not specify whether the attack was financially motivated, state-sponsored, or opportunistic, but the compromise of such sensitive data underscores the severity of the incident for both the institution and the impacted individuals.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/8be7ca5f-aa34-4b73-87cd-c0c3917421df.shtml

TPRM report: https://www.rankiteo.com/company/hebronacad

"id": "heb245090125",
"linkid": "hebronacad",
"type": "Breach",
"date": "2/2020",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 187,
                        'industry': 'Education',
                        'location': 'Hebron, Maine, USA',
                        'name': 'Hebron Academy',
                        'type': 'Educational Institution'}],
 'attack_vector': 'Hacking',
 'customer_advisories': 'Identity theft protection services (24 months of '
                        'credit monitoring via CyberScout) offered to affected '
                        'individuals.',
 'data_breach': {'number_of_records_exposed': 187,
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Social Security Numbers']},
 'date_publicly_disclosed': '2021-02-01',
 'description': 'The Maine Office of the Attorney General reported that Hebron '
                'Academy experienced a data breach due to hacking incidents '
                'occurring between February 7, 2020, and May 20, 2020. The '
                'breach impacted 187 individuals, including 103 residents, '
                'with Social Security Numbers being the type of information '
                'compromised. Identity theft protection services, including 24 '
                'months of credit monitoring from CyberScout, were offered to '
                'affected individuals.',
 'impact': {'data_compromised': ['Social Security Numbers'],
            'identity_theft_risk': 'High (SSNs compromised)'},
 'references': [{'date_accessed': '2021-02-01',
                 'source': 'Maine Office of the Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': ['Maine Office of the '
                                                        'Attorney General']},
 'response': {'third_party_assistance': ['CyberScout (for identity theft '
                                         'protection)']},
 'title': 'Hebron Academy Data Breach (2020)',
 'type': 'Data Breach'}