The Maryland Office of the Attorney General reported a data breach involving Varsity Tutors LLC on June 3, 2022. The breach, which occurred between November 1 and November 6, 2021, involved a misconfigured Amazon Web Services (AWS) S3 storage bucket potentially exposing government-issued photo identification of 703 Maryland residents. Varsity Tutors is offering 12 months of credit monitoring services to affected individuals.
Source: https://www.marylandattorneygeneral.gov/Pages/IdentityTheft/breachnotices.aspx
TPRM report: https://www.rankiteo.com/company/varsity-tutors
"id": "var412071725",
"linkid": "varsity-tutors",
"type": "Breach",
"date": "11/2021",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': 703,
'industry': 'Education',
'location': 'Maryland',
'name': 'Varsity Tutors LLC',
'type': 'Company'}],
'attack_vector': 'Misconfigured AWS S3 Bucket',
'data_breach': {'number_of_records_exposed': 703,
'personally_identifiable_information': True,
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Government-issued photo '
'identification']},
'date_detected': '2022-06-03',
'date_publicly_disclosed': '2022-06-03',
'description': 'A data breach involving Varsity Tutors LLC exposed '
'government-issued photo identification of 703 Maryland '
'residents due to a misconfigured AWS S3 storage bucket.',
'impact': {'data_compromised': ['Government-issued photo identification'],
'systems_affected': ['AWS S3 storage bucket']},
'post_incident_analysis': {'root_causes': 'Misconfigured AWS S3 storage '
'bucket'},
'references': [{'date_accessed': '2022-06-03',
'source': 'Maryland Office of the Attorney General'}],
'response': {'remediation_measures': ['Offering 12 months of credit '
'monitoring services']},
'title': 'Varsity Tutors LLC Data Breach',
'type': 'Data Breach',
'vulnerability_exploited': 'Misconfiguration'}