Spotswood Public Schools

The New Jersey Department of Education reported that Spotswood Public Schools experienced unauthorized access to its computer systems on September 11, 2021. The breach involved the unauthorized person taking files that contained personal information for one Maine resident, including their name and elements such as Social Security number, driver’s license number, and/or financial account information. A notification letter will be mailed to the affected individual on November 18, 2021.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/f9c74785-aeb9-4a15-bf1d-e25ab1f03db3.shtml

TPRM report: https://www.rankiteo.com/company/spotswood-board-of-education

"id": "spo253072725",
"linkid": "spotswood-board-of-education",
"type": "Breach",
"date": "9/2021",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 1,
                        'industry': 'Education',
                        'location': 'New Jersey',
                        'name': 'Spotswood Public Schools',
                        'type': 'Educational Institution'}],
 'attack_vector': 'Unauthorized Access',
 'data_breach': {'data_exfiltration': True,
                 'number_of_records_exposed': 1,
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Personal Information']},
 'date_detected': '2021-09-11',
 'description': 'The New Jersey Department of Education reported that '
                'Spotswood Public Schools experienced unauthorized access to '
                'its computer systems on September 11, 2021. The breach '
                'involved the unauthorized person taking files that contained '
                'personal information for one Maine resident, including their '
                'name and elements such as Social Security number, driver’s '
                'license number, and/or financial account information. A '
                'notification letter will be mailed to the affected individual '
                'on November 18, 2021.',
 'impact': {'data_compromised': ['Name',
                                 'Social Security number',
                                 'Driver’s license number',
                                 'Financial account information']},
 'references': [{'source': 'New Jersey Department of Education'}],
 'response': {'communication_strategy': 'Notification letter to be mailed to '
                                        'the affected individual on November '
                                        '18, 2021'},
 'threat_actor': 'Unauthorized Person',
 'title': 'Unauthorized Access to Spotswood Public Schools Computer Systems',
 'type': 'Data Breach'}