The University of Toledo University College

UT alerts some faculty & students of lost flash drive which contained Social Security numbers.

A UT faculty member lost an unencrypted flash drive containing personal information belonging to some students, faculty, staff, and external research coordinators.

That information included names, addresses, Social Security numbers and possibly birth dates.

There is no evidence that the information has been accessed or used improperly.

UT conducted a full investigation of the incident and the employee has been disciplined.

The university is offering a free, one-year membership to an identity theft monitoring service.

Source: https://www.toledoblade.com/Education/2018/05/18/UT-alerts-faculty-students-of-lost-flash-drive-containing-Social-Security-numbers.html

TPRM report: https://scoringcyber.rankiteo.com/company/the-university-of-toledo-university-college

"id": "the18358722",
"linkid": "the-university-of-toledo-university-college",
"type": "Data Leak",
"date": "05/2018",
"severity": "50",
"impact": "1",
"explanation": "Attack without any consequences"

{'affected_entities': [{'industry': 'Education',
                        'name': 'University of Texas',
                        'type': 'Educational Institution'}],
 'attack_vector': 'Lost Physical Media',
 'data_breach': {'data_encryption': 'None',
                 'personally_identifiable_information': ['Names',
                                                         'Addresses',
                                                         'Social Security '
                                                         'numbers',
                                                         'Birth dates'],
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Personal Information',
                                              'Sensitive Personal '
                                              'Information']},
 'description': 'A UT faculty member lost an unencrypted flash drive '
                'containing personal information belonging to some students, '
                'faculty, staff, and external research coordinators. The '
                'information included names, addresses, Social Security '
                'numbers, and possibly birth dates.',
 'impact': {'data_compromised': ['Names',
                                 'Addresses',
                                 'Social Security numbers',
                                 'Birth dates'],
            'identity_theft_risk': 'High'},
 'investigation_status': 'Completed',
 'post_incident_analysis': {'root_causes': 'Loss of unencrypted flash drive'},
 'response': {'remediation_measures': ['Disciplined the employee',
                                       'Offering identity theft monitoring '
                                       'service']},
 'title': 'UT Lost Flash Drive Incident',
 'type': 'Data Breach',
 'vulnerability_exploited': 'Unencrypted Data Storage'}