University of Otago

An online loophole in the network of the University of Otago allowed a handful of users to access a veritable treasure trove of information.

The types of information exposed in the in included phone numbers, addresses, passport details, exam results, police vetting lists, academic integrity investigation invitation letters, referee reports, passport scans, p-card receipts, and invoices.

however, the university was alerted to the loophole and soon it closed it.

Source: https://www.databreaches.net/nz-unfortunate-and-regrettable-incident-inside-the-otago-university-data-breach/

"id": "UNI0221222",
"linkid": "university-of-otago",
"type": "Breach",
"date": "12/2022",
"severity": "80",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"