Norman Public Schools

Norman Public Schools (NPS) in Oklahoma suffered a ransomware attack by the Hive ransomware team.

The attack compromised the names, addresses, Social Security numbers, and financial account numbers for payroll purposes and the other information of the NSP current and former employees – including substitute teachers and summer staff.

The exposed information also included about 3,850 employees’ SSNs.

NPS offered identity theft protection services to all potentially impacted individuals for twelve (12) months, through IDX including credit and CyberScan monitoring, a $1,000,000 insurance reimbursement policy, and fully managed identity theft recovery services.

Source: https://www.databreaches.net/student-and-employee-data-from-norman-public-schools-starts-to-appear-on-dark-web/

TPRM report: https://www.rankiteo.com/company/norman-public-schools

"id": "nor2243241122",
"linkid": "norman-public-schools",
"type": "Ransomware",
"date": "6/2017",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"

{'affected_entities': [{'industry': 'Education',
                        'location': 'Oklahoma',
                        'name': 'Norman Public Schools',
                        'type': 'Educational Institution'}],
 'data_breach': {'number_of_records_exposed': 3850,
                 'personally_identifiable_information': ['Social Security '
                                                         'numbers'],
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Personal Information',
                                              'Financial Information']},
 'description': 'Norman Public Schools (NPS) in Oklahoma suffered a ransomware '
                'attack by the Hive ransomware team. The attack compromised '
                'the names, addresses, Social Security numbers, and financial '
                'account numbers for payroll purposes and other information of '
                'NPS current and former employees – including substitute '
                'teachers and summer staff. The exposed information also '
                'included about 3,850 employees’ SSNs. NPS offered identity '
                'theft protection services to all potentially impacted '
                'individuals for twelve (12) months, through IDX including '
                'credit and CyberScan monitoring, a $1,000,000 insurance '
                'reimbursement policy, and fully managed identity theft '
                'recovery services.',
 'impact': {'data_compromised': ['names',
                                 'addresses',
                                 'Social Security numbers',
                                 'financial account numbers'],
            'identity_theft_risk': 'High',
            'payment_information_risk': 'High'},
 'ransomware': {'ransomware_strain': 'Hive'},
 'threat_actor': 'Hive ransomware team',
 'title': 'Ransomware Attack on Norman Public Schools',
 'type': 'Ransomware Attack'}