LITCHFIELD SCHOOL DISTRICT

Litchfield School District discovered a data breach incident after an individual with authority to access student records shared certain student records to their personal email account.

The compromised documents contained the special education documents, which may include student names, dates of birth, addresses, and SASID numbers, certain assignments.

The breach affected 630 New Hampshire students which were then notified by the school.

Source: https://www.databreaches.net/nh-litchfield-school-district-employee-wrongdoing-created-student-data-security-incident/

TPRM report: https://www.rankiteo.com/company/litchfield-school-district

"id": "lit1814522",
"linkid": "litchfield-school-district",
"type": "Breach",
"date": "6/2017",
"severity": "80",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': '630 students',
                        'industry': 'Education',
                        'location': 'New Hampshire',
                        'name': 'Litchfield School District',
                        'type': 'Educational Institution'}],
 'attack_vector': 'Insider Threat',
 'data_breach': {'data_exfiltration': 'Yes',
                 'file_types_exposed': ['Special education documents',
                                        'Assignments'],
                 'number_of_records_exposed': '630',
                 'personally_identifiable_information': ['Student names',
                                                         'Dates of birth',
                                                         'Addresses',
                                                         'SASID numbers'],
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Personally Identifiable '
                                              'Information',
                                              'Educational Records']},
 'description': 'Litchfield School District discovered a data breach incident '
                'after an individual with authority to access student records '
                'shared certain student records to their personal email '
                'account. The compromised documents contained the special '
                'education documents, which may include student names, dates '
                'of birth, addresses, and SASID numbers, certain assignments. '
                'The breach affected 630 New Hampshire students which were '
                'then notified by the school.',
 'impact': {'data_compromised': ['Student names',
                                 'Dates of birth',
                                 'Addresses',
                                 'SASID numbers',
                                 'Assignments']},
 'response': {'communication_strategy': 'Notified affected students'},
 'threat_actor': 'Insider',
 'title': 'Data Breach at Litchfield School District',
 'type': 'Data Breach',
 'vulnerability_exploited': 'Unauthorized Data Sharing'}