Lake Erie College of Osteopathic Medicine

Lake Erie College of Osteopathic Medicine sufferedd a data breach incident after spreadsheets containing personal information of some LECOM students was inadvertently exposed on the Internet due to a misconfiguration of a test server.

The information contained in the spreadsheets included students’ names, Social Security numbers, e-mail address, and in some cases, dates of birth.

LECOM sent out the breach notification letters to all the individuals.

Source: https://www.databreaches.net/lake-erie-college-of-osteopathic-medicine-students-notified-of-breach-by-benefits-administrator-hubbard-bert/

TPRM report: https://scoringcyber.rankiteo.com/company/lake-erie-college-of-osteopathic-medicine

"id": "lak16313123",
"linkid": "lake-erie-college-of-osteopathic-medicine",
"type": "Data Leak",
"date": "05/2014",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'industry': 'Education',
                        'name': 'Lake Erie College of Osteopathic Medicine',
                        'type': 'Educational Institution'}],
 'attack_vector': 'Misconfiguration',
 'data_breach': {'file_types_exposed': ['Spreadsheets'],
                 'personally_identifiable_information': ['names',
                                                         'Social Security '
                                                         'numbers',
                                                         'e-mail address',
                                                         'dates of birth'],
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Personal Information']},
 'description': 'Lake Erie College of Osteopathic Medicine suffered a data '
                'breach incident after spreadsheets containing personal '
                'information of some LECOM students were inadvertently exposed '
                'on the Internet due to a misconfiguration of a test server.',
 'impact': {'data_compromised': ['names',
                                 'Social Security numbers',
                                 'e-mail address',
                                 'dates of birth']},
 'post_incident_analysis': {'root_causes': ['Test server misconfiguration']},
 'response': {'communication_strategy': ['Breach notification letters sent to '
                                         'all individuals']},
 'title': 'Lake Erie College of Osteopathic Medicine Data Breach',
 'type': 'Data Breach',
 'vulnerability_exploited': 'Test server misconfiguration'}