The personal information of 160 Temple University students was exposed after an employee accidentally uploaded a document to a public university website.
The document includes information like dates of birth, cell phone numbers, and passport information.
Affected students were notified that their names, passport numbers, issuing passport country, passport issue date, dates of birth, travel dates, and cell phone numbers were exposed on the website.
Students got 90 days to enroll in free credit and web monitoring services, a $1 million identity fraud loss reimbursement, and identity theft restoration, among other services from Kroll, a risk mitigation firm.
TPRM report: https://scoringcyber.rankiteo.com/company/templeuniversity
"id": "tem203726323",
"linkid": "templeuniversity",
"type": "Data Leak",
"date": "06/2019",
"severity": "85",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"
{'affected_entities': [{'customers_affected': 160,
'industry': 'Education',
'name': 'Temple University',
'type': 'Educational Institution'}],
'attack_vector': 'Accidental Data Upload',
'data_breach': {'number_of_records_exposed': 160,
'personally_identifiable_information': ['names',
'passport numbers',
'issuing passport '
'country',
'passport issue date',
'dates of birth',
'travel dates',
'cell phone numbers'],
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Personal Information']},
'description': 'The personal information of 160 Temple University students '
'was exposed after an employee accidentally uploaded a '
'document to a public university website.',
'impact': {'data_compromised': ['names',
'passport numbers',
'issuing passport country',
'passport issue date',
'dates of birth',
'travel dates',
'cell phone numbers'],
'identity_theft_risk': 'High'},
'motivation': 'Accidental',
'response': {'remediation_measures': ['Free credit and web monitoring '
'services',
'$1 million identity fraud loss '
'reimbursement',
'Identity theft restoration'],
'third_party_assistance': ['Kroll']},
'threat_actor': 'Internal Employee',
'title': 'Temple University Data Exposure Incident',
'type': 'Data Exposure'}