The California Office of the Attorney General reported a data breach at Point Loma Nazarene University on December 15, 2014. The breach occurred between October 7, 2014, and October 20, 2014, involving unauthorized access to five employee email accounts due to phishing attacks. The potentially compromised personal information included names, Social Security numbers, and other sensitive data.
Source: https://oag.ca.gov/ecrime/databreach/reports/sb24-47722
TPRM report: https://www.rankiteo.com/company/point-loma-nazarene-university-school-of-nursing
"id": "poi348072725",
"linkid": "point-loma-nazarene-university-school-of-nursing",
"type": "Breach",
"date": "10/2014",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"
{'affected_entities': [{'industry': 'Education',
'location': 'California',
'name': 'Point Loma Nazarene University',
'type': 'Educational Institution'}],
'attack_vector': 'Phishing',
'data_breach': {'personally_identifiable_information': True,
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Names',
'Social Security numbers',
'Other sensitive data']},
'date_detected': '2014-12-15',
'date_publicly_disclosed': '2014-12-15',
'description': 'The California Office of the Attorney General reported a data '
'breach at Point Loma Nazarene University on December 15, '
'2014. The breach occurred between October 7, 2014, and '
'October 20, 2014, involving unauthorized access to five '
'employee email accounts due to phishing attacks, with '
'potentially compromised personal information including names, '
'Social Security numbers, and other sensitive data.',
'impact': {'data_compromised': ['Names',
'Social Security numbers',
'Other sensitive data']},
'initial_access_broker': {'entry_point': 'Email Accounts'},
'post_incident_analysis': {'root_causes': 'Phishing attacks'},
'references': [{'date_accessed': '2014-12-15',
'source': 'California Office of the Attorney General'}],
'title': 'Data Breach at Point Loma Nazarene University',
'type': 'Data Breach',
'vulnerability_exploited': 'Email Accounts'}