The National Board for Certified Counselors ("NBCC") was impacted by malware which prevented access to certain files on the system.
The compromised information included name, address, Social Security number, date of birth, and credential information.
NBCC hired third-party forensic investigators and the Federal Bureau of Investigation to investigate the incident and secure its systems, and notify potentially affected individuals.
NBCC notified regulatory authorities and also provided those whose personal information was exposed by this incident with access to complimentary credit monitoring services through TransUnion.
TPRM report: https://www.rankiteo.com/company/the-national-board-for-certified-counselors
"id": "the112525522",
"linkid": "the-national-board-for-certified-counselors",
"type": "Ransomware",
"date": "6/2017",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"
{'affected_entities': [{'industry': 'Education/Certification',
'name': 'National Board for Certified Counselors',
'type': 'Organization'}],
'customer_advisories': 'Notification to potentially affected individuals',
'data_breach': {'personally_identifiable_information': ['name',
'address',
'Social Security '
'number',
'date of birth'],
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['name',
'address',
'Social Security number',
'date of birth',
'credential information']},
'description': 'The National Board for Certified Counselors (NBCC) was '
'impacted by malware which prevented access to certain files '
'on the system. The compromised information included name, '
'address, Social Security number, date of birth, and '
'credential information. NBCC hired third-party forensic '
'investigators and the Federal Bureau of Investigation to '
'investigate the incident and secure its systems, and notify '
'potentially affected individuals. NBCC notified regulatory '
'authorities and also provided those whose personal '
'information was exposed by this incident with access to '
'complimentary credit monitoring services through TransUnion.',
'impact': {'data_compromised': ['name',
'address',
'Social Security number',
'date of birth',
'credential information']},
'investigation_status': 'Ongoing investigation by third-party forensic '
'investigators and the Federal Bureau of '
'Investigation',
'regulatory_compliance': {'regulatory_notifications': 'Regulatory authorities '
'notified'},
'response': {'communication_strategy': 'Notification to potentially affected '
'individuals and regulatory '
'authorities',
'law_enforcement_notified': 'Federal Bureau of Investigation',
'recovery_measures': 'Complimentary credit monitoring services '
'through TransUnion',
'third_party_assistance': 'Third-party forensic investigators, '
'Federal Bureau of Investigation'},
'title': 'NBCC Malware Incident',
'type': 'Malware'}