University of Greenwich

University of Greenwich suffered a security breach in which the personal data of 19,500 students that was uploaded on a microsite for a training conference in 2004,was leaked online.

The exposed information included the names, addresses, dates of birth, phone numbers, and signatures, physical and mental health problems.

The university investigated the attack and secured the data and notified the impacted students.

However, it was fined £120,000 for data breach by the Information Commissioner.

Source: https://www.bbc.com/news/technology-44197118

TPRM report: https://scoringcyber.rankiteo.com/company/university-of-greenwich

"id": "uni23114522",
"linkid": "university-of-greenwich",
"type": "Breach",
"date": "05/2018",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"

{'affected_entities': [{'customers_affected': 19500,
                        'industry': 'Education',
                        'location': 'Greenwich, UK',
                        'name': 'University of Greenwich',
                        'type': 'Educational Institution'}],
 'data_breach': {'data_exfiltration': True,
                 'number_of_records_exposed': 19500,
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['names',
                                              'addresses',
                                              'dates of birth',
                                              'phone numbers',
                                              'signatures',
                                              'physical and mental health '
                                              'problems']},
 'description': 'University of Greenwich suffered a security breach in which '
                'the personal data of 19,500 students that was uploaded on a '
                'microsite for a training conference in 2004, was leaked '
                'online.',
 'impact': {'data_compromised': ['names',
                                 'addresses',
                                 'dates of birth',
                                 'phone numbers',
                                 'signatures',
                                 'physical and mental health problems'],
            'legal_liabilities': 'Fined £120,000 by the Information '
                                 'Commissioner'},
 'regulatory_compliance': {'fines_imposed': '£120,000'},
 'response': {'remediation_measures': 'Secured the data and notified the '
                                      'impacted students'},
 'title': 'University of Greenwich Data Breach',
 'type': 'Data Breach'}