Phillips Academy

The Maine Office of the Attorney General reported that Phillips Academy experienced an external system breach due to hacking between May 8, 2021, and May 25, 2021, potentially affecting the personal information of 1,573 individuals. Affected information included names combined with Social Security Numbers and/or financial account information. Notification letters were mailed to 11 Maine residents beginning on September 21, 2021, and identity theft protection services through Experian were offered.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/489ec838-dcfa-47a3-8140-153acaf14323.shtml

TPRM report: https://www.rankiteo.com/company/the-phillips-academy

"id": "the347072725",
"linkid": "the-phillips-academy",
"type": "Breach",
"date": "5/2021",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 1573,
                        'industry': 'Education',
                        'location': 'Andover, Massachusetts',
                        'name': 'Phillips Academy',
                        'type': 'Educational Institution'}],
 'attack_vector': 'Hacking',
 'data_breach': {'number_of_records_exposed': 1573,
                 'personally_identifiable_information': 'Yes',
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Social Security Numbers',
                                              'Financial account information']},
 'date_detected': '2021-05-08',
 'date_publicly_disclosed': '2021-09-21',
 'description': 'The Maine Office of the Attorney General reported that '
                'Phillips Academy experienced an external system breach due to '
                'hacking between May 8, 2021, and May 25, 2021, potentially '
                'affecting the personal information of 1,573 individuals. '
                'Affected information included names combined with Social '
                'Security Numbers and/or financial account information. '
                'Notification letters were mailed to 11 Maine residents '
                'beginning on September 21, 2021, and identity theft '
                'protection services through Experian were offered.',
 'impact': {'data_compromised': ['Social Security Numbers',
                                 'Financial account information'],
            'identity_theft_risk': 'High',
            'payment_information_risk': 'High'},
 'references': [{'date_accessed': '2021-09-21',
                 'source': 'Maine Office of the Attorney General'}],
 'response': {'communication_strategy': 'Notification letters mailed to '
                                        'affected individuals',
              'third_party_assistance': 'Experian'},
 'title': 'Phillips Academy Data Breach',
 'type': 'Data Breach'}