Palm Beach County suffered a data breach incident that exposed the personal info of 5,800 teachers.
The teachers’ Social Security numbers and names were inadvertently included in a file sent to an outside contractor, Educational Resource Strategies (ERS), as part of an ongoing budget review.
ERS immediately investigated the incident and took all necessary steps to purge the Social Security data from its system, and ensured that the Social Security data was not stored in any backup or storage system with ERS.
The District Changed its policies and procedures to strengthen its protection of confidential employee data and replaced employees’ Social Security numbers with employee identification numbers in all non-Human Resources systems.
Source: https://www.databreaches.net/5800-palm-beach-county-teachers-notified-of-data-security-breach/
TPRM report: https://scoringcyber.rankiteo.com/company/palm-beach-county-school-district
"id": "pal112225522",
"linkid": "palm-beach-county-school-district",
"type": "Breach",
"date": "05/2016",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"{'affected_entities': [{'industry': 'Education',
'location': 'Palm Beach County, Florida',
'name': 'Palm Beach County',
'type': 'Government'}],
'attack_vector': 'Inadvertent Data Exposure',
'data_breach': {'number_of_records_exposed': '5,800',
'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High',
'type_of_data_compromised': 'Social Security numbers, Names'},
'description': 'Palm Beach County suffered a data breach incident that '
'exposed the personal info of 5,800 teachers. The teachers’ '
'Social Security numbers and names were inadvertently included '
'in a file sent to an outside contractor, Educational Resource '
'Strategies (ERS), as part of an ongoing budget review.',
'impact': {'data_compromised': 'Social Security numbers, Names'},
'post_incident_analysis': {'corrective_actions': 'Changed policies and '
'procedures to strengthen '
'protection of confidential '
'employee data and replaced '
'Social Security numbers '
'with employee '
'identification numbers in '
'all non-Human Resources '
'systems.',
'root_causes': 'Inadvertent inclusion of Social '
'Security numbers and names in a '
'file sent to an outside '
'contractor.'},
'response': {'containment_measures': 'ERS immediately investigated the '
'incident and took all necessary steps '
'to purge the Social Security data from '
'its system, and ensured that the Social '
'Security data was not stored in any '
'backup or storage system with ERS.',
'remediation_measures': 'The District Changed its policies and '
'procedures to strengthen its protection '
'of confidential employee data and '
'replaced employees’ Social Security '
'numbers with employee identification '
'numbers in all non-Human Resources '
'systems.',
'third_party_assistance': 'Educational Resource Strategies '
'(ERS)'},
'title': 'Palm Beach County Data Breach',
'type': 'Data Breach'}