Indianapolis Public Schools

The Indianapolis Public Schools (IPS) experienced a data breach reported by the Maine Office of the Attorney General on December 1, 2020, though the incident occurred between January 28, 2020, and May 25, 2020. The breach resulted from an external system hack, compromising the personal and financial data of at least eight Maine residents, including financial account numbers. While the exact scale of the breach remains undisclosed, the exposure of financial details poses significant risks, such as identity theft, fraud, or unauthorized transactions.IPS responded by offering 12 months of credit monitoring and identity restoration services via Kroll to affected individuals, aiming to mitigate potential financial and reputational harm. The breach highlights vulnerabilities in IPS’s cybersecurity defenses, particularly in safeguarding sensitive financial information from external threats. Though no evidence suggests widespread exploitation of the exposed data, the incident underscores the critical need for robust data protection measures in educational institutions handling personal and financial records.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/03456fa5-a4d9-421b-a2d6-99e108bc5793.shtml

TPRM report: https://www.rankiteo.com/company/indianapolis-public-schools

"id": "ind014091825",
"linkid": "indianapolis-public-schools",
"type": "Breach",
"date": "1/2020",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': '8 (Maine residents)',
                        'industry': 'Education',
                        'location': 'Indianapolis, Indiana, USA',
                        'name': 'Indianapolis Public Schools (IPS)',
                        'type': 'Educational Institution'},
                       {'industry': 'Legal/Regulatory',
                        'location': 'Maine, USA',
                        'name': 'Maine Office of the Attorney General',
                        'type': 'Government Agency'}],
 'attack_vector': 'External System Breach (Hacking)',
 'customer_advisories': '12 months of credit monitoring and identity '
                        'restoration services provided to affected individuals '
                        'through Kroll.',
 'data_breach': {'number_of_records_exposed': '8',
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Personal Information',
                                              'Financial Account Numbers']},
 'date_publicly_disclosed': '2020-12-01',
 'description': 'The Maine Office of the Attorney General reported a data '
                'breach involving Indianapolis Public Schools (IPS) on '
                'December 1, 2020. The breach occurred between January 28, '
                '2020, and May 25, 2020, involving an external system breach '
                '(hacking) affecting eight Maine residents whose personal '
                'information, including financial account numbers, may have '
                'been accessible. IPS is providing 12 months of credit '
                'monitoring and identity restoration services through Kroll to '
                'affected individuals.',
 'impact': {'data_compromised': ['Personal Information',
                                 'Financial Account Numbers'],
            'identity_theft_risk': 'High (Financial Account Numbers '
                                   'Compromised)',
            'payment_information_risk': 'High'},
 'references': [{'source': 'Maine Office of the Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': ['Maine Office of the '
                                                        'Attorney General']},
 'response': {'third_party_assistance': ['Kroll (Credit Monitoring and '
                                         'Identity Restoration Services)']},
 'title': 'Indianapolis Public Schools (IPS) Data Breach',
 'type': 'Data Breach'}