Syracuse University

An unauthorized person gained access to an employee’s email accounts of Syracuse University and compromise its student, alumni, and applicants' data.

The compromised information included the names and Social Security numbers of about 9,800 individuals.

SU secured the account and launched an investigation and offered provides identity protection support to the affected individuals.

Source: https://dailyorange.com/2021/02/names-social-security-numbers-of-syracuse-university-students-exposed-in-data-breach/

TPRM report: https://scoringcyber.rankiteo.com/company/syracuse-university

"id": "syr3143622",
"linkid": "syracuse-university",
"type": "Breach",
"date": "09/2020",
"severity": "80",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': '9,800',
                        'industry': 'Education',
                        'location': 'Syracuse, NY',
                        'name': 'Syracuse University',
                        'type': 'Educational Institution'}],
 'attack_vector': 'Email Account Compromise',
 'data_breach': {'number_of_records_exposed': '9,800',
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Personally Identifiable '
                                              'Information']},
 'description': 'An unauthorized person gained access to an employee’s email '
                'accounts of Syracuse University and compromised its student, '
                "alumni, and applicants' data. The compromised information "
                'included the names and Social Security numbers of about 9,800 '
                'individuals. SU secured the account and launched an '
                'investigation and offered identity protection support to the '
                'affected individuals.',
 'impact': {'data_compromised': ['Names', 'Social Security Numbers'],
            'identity_theft_risk': True},
 'investigation_status': 'Launched',
 'response': {'communication_strategy': 'Offered identity protection support '
                                        'to affected individuals',
              'containment_measures': 'Secured the account',
              'incident_response_plan_activated': True},
 'threat_actor': 'Unauthorized Person',
 'title': 'Syracuse University Email Account Breach',
 'type': 'Data Breach'}