South Washington County Schools suffered from a massive data breach incident after the accidental release of private student information sent out in an email attachment from the district’s transportation department.
The exposed information includes names, grades, identification numbers, email addresses, mailing addresses, phone numbers, bus routes, pick up and drop off times, pick up and drop off locations, and schools of attendance for some 9,000 students.
They asked who so ever received the email to delete the attachment and not forward it.
Source: https://www.databreaches.net/mn-error-exposes-private-info-on-thousands-of-south-wash-co-students/
TPRM report: https://scoringcyber.rankiteo.com/company/sowashcoschools
"id": "sou112181122",
"linkid": "sowashcoschools",
"type": "Data Leak",
"date": "08/2017",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"{'affected_entities': [{'customers_affected': 9000,
'industry': 'Education',
'location': 'Washington County',
'name': 'South Washington County Schools',
'type': 'Educational Institution'}],
'attack_vector': 'Email',
'data_breach': {'number_of_records_exposed': 9000,
'personally_identifiable_information': ['names',
'identification '
'numbers',
'email addresses',
'mailing addresses',
'phone numbers',
'bus routes',
'pick up and drop off '
'times',
'pick up and drop off '
'locations',
'schools of '
'attendance'],
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Personal Information',
'Educational Information',
'Contact Information']},
'description': 'South Washington County Schools suffered from a massive data '
'breach incident after the accidental release of private '
'student information sent out in an email attachment from the '
'district’s transportation department.',
'impact': {'data_compromised': ['names',
'grades',
'identification numbers',
'email addresses',
'mailing addresses',
'phone numbers',
'bus routes',
'pick up and drop off times',
'pick up and drop off locations',
'schools of attendance']},
'motivation': 'Accidental',
'response': {'containment_measures': 'Requested deletion of the email '
'attachment and not to forward it'},
'title': 'South Washington County Schools Data Breach',
'type': 'Data Breach',
'vulnerability_exploited': 'Accidental Exposure'}