Seattle University

Seattle University warned that the names and Social Security numbers of more than 2,000 people could be exposed after a university-issued laptop was lost last month.

Files containing information for 2,102 current and former faculty, staff and their dependents were accessible from the unencrypted laptop.

The university said that while there’s no indication the information was accessed, the laptop has access to information about employees and their dependents enrolled in the university’s benefit plan.

The university sent letters to those who be affected, offering a one-year membership for an identity-theft and credit-monitoring service.

Source: https://www.seattletimes.com/seattle-news/seattle-university-laptop-containing-2000-social-security-numbers-lost/

TPRM report: https://scoringcyber.rankiteo.com/company/seattle-university

"id": "sea15020323",
"linkid": "seattle-university",
"type": "Data Leak",
"date": "03/2019",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'customers_affected': 2102,
                        'industry': 'Education',
                        'location': 'Seattle, WA',
                        'name': 'Seattle University',
                        'type': 'Educational Institution'}],
 'attack_vector': 'Physical Theft/Loss',
 'data_breach': {'data_encryption': 'No',
                 'number_of_records_exposed': 2102,
                 'personally_identifiable_information': 'Yes',
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Names',
                                              'Social Security numbers']},
 'description': 'Seattle University warned that the names and Social Security '
                'numbers of more than 2,000 people could be exposed after a '
                'university-issued laptop was lost last month. Files '
                'containing information for 2,102 current and former faculty, '
                'staff, and their dependents were accessible from the '
                'unencrypted laptop. The university said that while there’s no '
                'indication the information was accessed, the laptop has '
                'access to information about employees and their dependents '
                'enrolled in the university’s benefit plan. The university '
                'sent letters to those who may be affected, offering a '
                'one-year membership for an identity-theft and '
                'credit-monitoring service.',
 'impact': {'data_compromised': ['Names', 'Social Security numbers'],
            'identity_theft_risk': 'High',
            'systems_affected': ['Laptop']},
 'references': [{'source': 'Seattle University'}],
 'response': {'communication_strategy': 'Letters sent to affected individuals '
                                        'offering a one-year membership for an '
                                        'identity-theft and credit-monitoring '
                                        'service'},
 'title': 'Data Exposure from Lost Laptop at Seattle University',
 'type': 'Data Breach',
 'vulnerability_exploited': 'Unencrypted Laptop'}