OSKALOOSA COMMUNITY SCHOOL DISTRICT

A data security incident involving a contractor utilized by the Oskaloosa Community School District and the Knoxville Community School District led to a leak of sensitive student data.

Both districts were notified by Timberline that a mysterious perpetrator had encrypted files and deleted data from their networks.

A press release stated that neither their internal systems nor student records were accessed as a result of the incident.

It transpires that there were more than just these two school districts alerted or potentially affected, and it's possible that some of the 190 school districts' previous and current Medicaid-covered pupils were also impacted.

Source: https://www.databreaches.net/ia-ocsd-kcsd-report-data-security-breach-of-student-info-at-medicaid-billing-service/

TPRM report: https://scoringcyber.rankiteo.com/company/oskaloosa-community-school-district

"id": "osk164010523",
"linkid": "oskaloosa-community-school-district",
"type": "Data Leak",
"date": "10/2020",
"severity": "50",
"impact": "2",
"explanation": "Attack limited on finance or reputation"

{'affected_entities': [{'industry': 'Education',
                        'location': 'Oskaloosa, Iowa',
                        'name': 'Oskaloosa Community School District',
                        'type': 'School District'},
                       {'industry': 'Education',
                        'location': 'Knoxville, Iowa',
                        'name': 'Knoxville Community School District',
                        'type': 'School District'},
                       {'industry': 'Education',
                        'name': "190 school districts' previous and current "
                                'Medicaid-covered pupils',
                        'type': 'School Districts'}],
 'attack_vector': 'Unspecified',
 'data_breach': {'type_of_data_compromised': 'Sensitive student data'},
 'description': 'A data security incident involving a contractor utilized by '
                'the Oskaloosa Community School District and the Knoxville '
                'Community School District led to a leak of sensitive student '
                'data. Both districts were notified by Timberline that a '
                'mysterious perpetrator had encrypted files and deleted data '
                'from their networks. A press release stated that neither '
                'their internal systems nor student records were accessed as a '
                'result of the incident. It transpires that there were more '
                'than just these two school districts alerted or potentially '
                "affected, and it's possible that some of the 190 school "
                "districts' previous and current Medicaid-covered pupils were "
                'also impacted.',
 'impact': {'data_compromised': 'Sensitive student data',
            'systems_affected': 'Networks of the contractor Timberline'},
 'threat_actor': 'Unknown',
 'title': 'Data Security Incident Involving School Districts',
 'type': 'Data Breach'}