A Victorian high school student suffered from a data breach incident after a student stole a staff password with help of that they were able to examine the medical records of other students through the school's IT system.
The exposed information includes contact details, medical information, and Medicare card numbers.
They investigated the incident and took preventive steps.
TPRM report: https://scoringcyber.rankiteo.com/company/victoria-high-school
"id": "vic105471022",
"linkid": "victoria-high-school",
"type": "Breach",
"date": "05/2017",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"{'affected_entities': [{'industry': 'Education',
'location': 'Victoria, Australia',
'name': 'Victorian High School',
'type': 'Educational Institution'}],
'attack_vector': 'Password Theft',
'data_breach': {'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Contact Details',
'Medical Information',
'Medicare Card Numbers']},
'description': 'A Victorian high school student suffered from a data breach '
'incident after a student stole a staff password, which '
'allowed them to examine the medical records of other students '
"through the school's IT system. The exposed information "
'includes contact details, medical information, and Medicare '
'card numbers. They investigated the incident and took '
'preventive steps.',
'impact': {'data_compromised': ['Contact Details',
'Medical Information',
'Medicare Card Numbers'],
'systems_affected': "School's IT System"},
'initial_access_broker': {'entry_point': 'Stolen Password'},
'motivation': 'Unauthorized Access',
'threat_actor': 'Student',
'title': 'Data Breach at Victorian High School',
'type': 'Data Breach',
'vulnerability_exploited': 'Weak Password Security'}