Somerset ISD

Somerset Independent School District was targeted by the Avaddon threat actors in a ransomware attack.

The attackers dumped about 1,520 files in 27 folders comprising more than 3 GB of data that was stolen in the attack on their leak site.

The dumped data included 30 spreadsheets containing campus id, name, password, grade, state id, email, and other important information about its students.

Source: https://www.databreaches.net/update-threat-actors-dump-somerset-isd-student-personal-and-health-information/

TPRM report: https://www.rankiteo.com/company/somerset-isd

"id": "som343622",
"linkid": "somerset-isd",
"type": "Ransomware",
"date": "6/2017",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"

{'affected_entities': [{'industry': 'Education',
                        'name': 'Somerset Independent School District',
                        'type': 'Educational Institution'}],
 'data_breach': {'data_exfiltration': True,
                 'file_types_exposed': ['spreadsheets'],
                 'number_of_records_exposed': '1,520 files',
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['campus id',
                                              'name',
                                              'password',
                                              'grade',
                                              'state id',
                                              'email']},
 'description': 'Somerset Independent School District was targeted by the '
                'Avaddon threat actors in a ransomware attack. The attackers '
                'dumped about 1,520 files in 27 folders comprising more than 3 '
                'GB of data that was stolen in the attack on their leak site. '
                'The dumped data included 30 spreadsheets containing campus '
                'id, name, password, grade, state id, email, and other '
                'important information about its students.',
 'impact': {'data_compromised': ['campus id',
                                 'name',
                                 'password',
                                 'grade',
                                 'state id',
                                 'email']},
 'motivation': 'Data theft and ransom',
 'ransomware': {'data_exfiltration': True, 'ransomware_strain': 'Avaddon'},
 'references': [{'source': 'Cyber Incident Description'}],
 'threat_actor': 'Avaddon',
 'title': 'Ransomware Attack on Somerset Independent School District',
 'type': 'Ransomware'}