A higher education institution in Victoria, Australia, has disclosed a data breach impacting the personal data of around 90,000 staff, students, and suppliers.
An individual who attended the campus in late 2018 had obtained unauthorized access to Melbourne Polytechnic’s computer systems by hard logging onto the network.
Compromised information including email addresses, passwords, and financial and health information.
For a smaller number of people, financial information such as banking and credit card details, passport and drivers licence numbers and some confidential health details had been accessed.
TPRM report: https://www.rankiteo.com/company/melbourne-polytechnic
"id": "mel2312221222",
"linkid": "melbourne-polytechnic",
"type": "Data Leak",
"date": "6/2018",
"severity": "85",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"{'affected_entities': [{'customers_affected': 90000,
'industry': 'Education',
'location': 'Victoria, Australia',
'name': 'Melbourne Polytechnic',
'type': 'Higher Education Institution'}],
'attack_vector': 'Unauthorized Access',
'data_breach': {'number_of_records_exposed': 90000,
'personally_identifiable_information': ['email addresses',
'passwords',
'financial '
'information',
'health information',
'banking details',
'credit card details',
'passport numbers',
'drivers licence '
'numbers',
'confidential health '
'details'],
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['email addresses',
'passwords',
'financial information',
'health information',
'banking details',
'credit card details',
'passport numbers',
'drivers licence numbers',
'confidential health details']},
'description': 'A higher education institution in Victoria, Australia, has '
'disclosed a data breach impacting the personal data of around '
'90,000 staff, students, and suppliers. An individual who '
'attended the campus in late 2018 had obtained unauthorized '
'access to Melbourne Polytechnic’s computer systems by hard '
'logging onto the network. Compromised information including '
'email addresses, passwords, and financial and health '
'information. For a smaller number of people, financial '
'information such as banking and credit card details, passport '
'and drivers licence numbers and some confidential health '
'details had been accessed.',
'impact': {'data_compromised': ['email addresses',
'passwords',
'financial information',
'health information',
'banking details',
'credit card details',
'passport numbers',
'drivers licence numbers',
'confidential health details']},
'initial_access_broker': {'entry_point': 'Hard logging onto the network'},
'threat_actor': 'Individual who attended the campus',
'title': 'Data Breach at Melbourne Polytechnic',
'type': 'Data Breach'}