Leon County Schools

More than 50,000 Leon County Schools students and teachers have had their sensitive information compromised in a major data breach.

The data was taken from a Virtual School server that was left unsecured.

It includes personal information of LCS staff and students from 2013 and possibly other records from May 2016 to February 2018.

It includes entire student records, from health to disciplinary information, and the Social Security numbers of teachers but no financial information.

Source: https://www.tallahassee.com/story/news/2018/03/12/50-k-leon-students-teachers-may-hit-virtual-school-data-breach/417257002/

TPRM report: https://scoringcyber.rankiteo.com/company/leon-county-schools

"id": "leo20449622",
"linkid": "leon-county-schools",
"type": "Breach",
"date": "03/2018",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization’s existence"

{'affected_entities': [{'customers_affected': 'More than 50,000 students and '
                                              'teachers',
                        'industry': 'Education',
                        'location': 'Leon County',
                        'name': 'Leon County Schools',
                        'type': 'Educational Institution'}],
 'attack_vector': 'Unsecured Server',
 'data_breach': {'number_of_records_exposed': 'More than 50,000',
                 'personally_identifiable_information': 'Yes',
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Personal Information',
                                              'Student Records',
                                              'Health Information',
                                              'Disciplinary Information',
                                              'Social Security Numbers']},
 'description': 'More than 50,000 Leon County Schools students and teachers '
                'have had their sensitive information compromised in a major '
                'data breach. The data was taken from a Virtual School server '
                'that was left unsecured. It includes personal information of '
                'LCS staff and students from 2013 and possibly other records '
                'from May 2016 to February 2018. It includes entire student '
                'records, from health to disciplinary information, and the '
                'Social Security numbers of teachers but no financial '
                'information.',
 'impact': {'data_compromised': ['Personal Information',
                                 'Student Records',
                                 'Health Information',
                                 'Disciplinary Information',
                                 'Social Security Numbers'],
            'systems_affected': 'Virtual School Server'},
 'title': 'Leon County Schools Data Breach',
 'type': 'Data Breach',
 'vulnerability_exploited': 'Unsecured Server'}