Barry University

Barry University experienced a data breach on January 20, 2022, where personal information of 485 individuals, including two Maine residents, was inadvertently disclosed. The breach was not detected until November 8, 2022, nearly 10 months later. The exposed data likely included sensitive personal details, though the exact nature of the compromised information was not specified in the report. In response, the university offered complimentary 12-month Experian credit monitoring services to affected individuals as a remedial measure. The delay in discovery raises concerns about the institution’s cybersecurity monitoring and incident response protocols. While no evidence of malicious exploitation was reported, the exposure of personal data poses risks such as identity theft, financial fraud, or phishing attacks targeting the victims. The breach underscores the importance of proactive data protection measures, timely detection, and transparent communication in mitigating the fallout from such incidents.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/2cee95cc-917d-437a-b216-bfe42ab1e901.shtml

TPRM report: https://www.rankiteo.com/company/the-barry-university-network

"id": "the217082125",
"linkid": "the-barry-university-network",
"type": "Breach",
"date": "1/2022",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': '485 individuals (including 2 '
                                              'Maine residents)',
                        'industry': 'Higher Education',
                        'location': 'Miami Shores, Florida, USA',
                        'name': 'Barry University',
                        'type': 'Educational Institution'},
                       {'industry': 'Legal/Regulatory',
                        'location': 'Maine, USA',
                        'name': 'Maine Office of the Attorney General',
                        'type': 'Government Agency'}],
 'customer_advisories': 'Credit monitoring services offered to affected '
                        'individuals',
 'data_breach': {'number_of_records_exposed': '485',
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High (PII; triggered credit '
                                        'monitoring)',
                 'type_of_data_compromised': 'Personal Information'},
 'date_detected': '2022-11-08',
 'date_publicly_disclosed': '2022-11-08',
 'description': 'The Maine Office of the Attorney General reported that Barry '
                'University experienced a data breach involving inadvertent '
                'disclosure of personal information on January 20, 2022, '
                'affecting a total of 485 individuals, including 2 residents. '
                'Complimentary 12-month Experian credit monitoring services '
                'were offered to those affected.',
 'impact': {'brand_reputation_impact': 'Potential (credit monitoring offered)',
            'data_compromised': 'Personal Information',
            'identity_theft_risk': 'High (credit monitoring provided)'},
 'investigation_status': 'Disclosed; remediation (credit monitoring) offered',
 'references': [{'source': 'Maine Office of the Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': 'Maine Office of the '
                                                       'Attorney General (as '
                                                       'per state breach '
                                                       'notification laws)'},
 'response': {'communication_strategy': 'Public disclosure via Maine AG '
                                        'office; notification to affected '
                                        'individuals (implied by credit '
                                        'monitoring offer)',
              'remediation_measures': 'Offered 12-month Experian credit '
                                      'monitoring to affected individuals'},
 'title': 'Barry University Data Breach (Inadvertent Disclosure of Personal '
          'Information)',
 'type': 'Data Breach (Inadvertent Disclosure)'}