Google Groups containing hundreds of University communications and associated documents with restricted, confidential, or otherwise sensitive information had misconfigured permission settings.
Anyone who could access the Boston College G Suite could view them.
No other access to confidential information occurred outside of the Heights investigation.
Some of the communications and records accessible were what appeared to be thousands of internal emails retained in Google Groups for the Boston College Police Department.
Some of these correspondences contained confidential, restricted, or otherwise sensitive information, including police logs and incident reports.
Source: https://www.bcheights.com/2018/04/09/google-groups-misconfiguration-sensitive/
"id": "THE145826622",
"linkid": "the-heights-inc.",
"type": "Data Leak",
"date": "04/2018",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"
Join the conversation