Mastery Schools

A ransomware attack on Mastery Schools, the largest charter school network in Philadelphia, compromised the personal data of 37,031 people. The breach, detected on September 15, 2024, exposed sensitive information including Social Security numbers, medical details, and student records. The attack, claimed by the ransomware group DragonForce, disrupted key operations such as phone and email access. Mastery Schools is offering free identity protection to victims and enhancing security measures.

Source: https://www.infosecurity-magazine.com/news/mastery-schools-data-breach/

TPRM report: https://scoringcyber.rankiteo.com/company/masteryschools

"id": "mas456061725",
"linkid": "masteryschools",
"type": "Ransomware",
"date": "6/2025",
"severity": "100",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': '37,031 people',
                        'industry': 'Education',
                        'location': 'Philadelphia and Camden',
                        'name': 'Mastery Schools',
                        'size': '14,000 students',
                        'type': 'Educational Institution'}],
 'customer_advisories': 'Official notices sent to affected individuals',
 'data_breach': {'data_exfiltration': '171 GB of data',
                 'number_of_records_exposed': '37,031',
                 'personally_identifiable_information': 'Yes',
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Names',
                                              'Dates of birth',
                                              'Social Security numbers',
                                              'Taxpayer ID numbers',
                                              'Government-issued IDs',
                                              'Passport numbers',
                                              'Bank and financial information',
                                              'Credit and debit card details',
                                              'Biometric data',
                                              'Usernames and passwords',
                                              'Medical and health insurance '
                                              'info',
                                              'Student ID numbers',
                                              'Student records']},
 'date_detected': '2024-09-15',
 'description': 'A ransomware attack that compromised the personal data of '
                '37,031 people has been confirmed by Mastery Schools, the '
                'largest charter school network in Philadelphia.',
 'impact': {'data_compromised': ['Names',
                                 'Dates of birth',
                                 'Social Security numbers',
                                 'Taxpayer ID numbers',
                                 'Government-issued IDs',
                                 'Passport numbers',
                                 'Bank and financial information',
                                 'Credit and debit card details',
                                 'Biometric data',
                                 'Usernames and passwords',
                                 'Medical and health insurance info',
                                 'Student ID numbers',
                                 'Student records'],
            'identity_theft_risk': 'None reported',
            'operational_impact': 'Disruption of key operations',
            'systems_affected': 'Phone and email access'},
 'investigation_status': 'Ongoing',
 'motivation': 'Financial Gain, Data Theft',
 'post_incident_analysis': {'corrective_actions': 'Increased use of '
                                                  'multi-factor '
                                                  'authentication, enhanced '
                                                  'endpoint monitoring'},
 'ransomware': {'data_encryption': 'Yes', 'data_exfiltration': 'Yes'},
 'references': [{'source': 'Comparitech'}],
 'response': {'communication_strategy': 'Official notices sent to affected '
                                        'individuals',
              'enhanced_monitoring': 'Enhanced endpoint monitoring',
              'law_enforcement_notified': 'Federal law enforcement agencies',
              'remediation_measures': 'Increased use of multi-factor '
                                      'authentication, enhanced endpoint '
                                      'monitoring',
              'third_party_assistance': 'External cybersecurity professionals'},
 'threat_actor': 'DragonForce',
 'title': 'Mastery Schools Ransomware Attack',
 'type': 'Data Breach, Ransomware'}