NYC Department of Education

The file transfer programme MOVEit was involved in a hack that, according to the New York City Department of Education, exposed the personal information of around 45,000 children.

Social security numbers, birth dates, and some student ratings are among the data that has been compromised, according to officials, though the specific data breaches per student vary.

According to officials, employee information was also impacted, however they did not specify how many employees were involved.

According to officials, the hack has not yet resulted in the publication of any education department data, and this summer, the department will start notifying those who were affected.

Source: https://www.databreaches.net/nyc-schools-disclose-student-and-staff-information-affected-by-moveit-breach-national-student-clearinghouse-silent-on-question-of-extortion-payment/

TPRM report: https://scoringcyber.rankiteo.com/company/nyc-department-of-education

"id": "nyc52725623",
"linkid": "nyc-department-of-education",
"type": "Data Leak",
"date": "06/2023",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'customers_affected': 45000,
                        'industry': 'Education',
                        'location': 'New York City',
                        'name': 'New York City Department of Education',
                        'type': 'Government'}],
 'attack_vector': 'Exploitation of MOVEit file transfer programme',
 'data_breach': {'number_of_records_exposed': 45000,
                 'personally_identifiable_information': ['Social security '
                                                         'numbers',
                                                         'Birth dates'],
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Social security numbers',
                                              'Birth dates',
                                              'Student ratings',
                                              'Employee information']},
 'description': 'The file transfer programme MOVEit was involved in a hack '
                'that, according to the New York City Department of Education, '
                'exposed the personal information of around 45,000 children.',
 'impact': {'data_compromised': ['Social security numbers',
                                 'Birth dates',
                                 'Student ratings',
                                 'Employee information']},
 'references': [{'source': 'New York City Department of Education'}],
 'response': {'communication_strategy': 'Notifying affected individuals this '
                                        'summer'},
 'title': 'New York City Department of Education Data Breach',
 'type': 'Data Breach'}