A student in the Santa Monica–Malibu Unified School District accessed the school's email.
The student was able to send messages to the student body for 16 minutes before the district’s technology team discovered the mass emails and disabled the system.
The Gmail application was been temporarily disabled, but teachers were able to use private comments within Google Docs Assignments or use the Stream within Google Classroom for public comments.
Source: https://patch.com/california/malibu/student-hacks-smmusds-email-server
TPRM report: https://scoringcyber.rankiteo.com/company/santa-monica-malibu-unified-school-district
"id": "san1437301222",
"linkid": "santa-monica-malibu-unified-school-district",
"type": "Breach",
"date": "05/2020",
"severity": "50",
"impact": "2",
"explanation": "Attack limited on finance or reputation"{'affected_entities': [{'industry': 'Education',
'location': 'Santa Monica–Malibu',
'name': 'Santa Monica–Malibu Unified School District',
'type': 'Educational Institution'}],
'attack_vector': 'Email System',
'description': 'A student in the Santa Monica–Malibu Unified School District '
"accessed the school's email system and sent messages to the "
'student body for 16 minutes before the district’s technology '
'team discovered the mass emails and disabled the system. The '
'Gmail application was temporarily disabled, but teachers were '
'able to use private comments within Google Docs Assignments '
'or use the Stream within Google Classroom for public '
'comments.',
'impact': {'downtime': '16 minutes',
'systems_affected': ['Gmail Application']},
'response': {'containment_measures': ['Disabled Gmail Application'],
'recovery_measures': ['Use of private comments within Google '
'Docs Assignments',
'Use of the Stream within Google Classroom '
'for public comments']},
'threat_actor': 'Student',
'title': 'Unauthorized Email Access in Santa Monica–Malibu Unified School '
'District',
'type': 'Unauthorized Access'}