The Pennsylvania School for the Deaf

The Pennsylvania School for the Deaf reported a data security incident involving a cybersecurity breach on December 26, 2023. The breach occurred on July 10, 2023, and involved unauthorized removal of information, potentially affecting 489 individuals, including personal details such as names, Social Security numbers, and driver's license numbers. Identity theft protection services were offered for 12 months through TransUnion.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/18cb8932-2a58-4583-884b-773925030890.shtml

TPRM report: https://www.rankiteo.com/company/western-pa-school-for-the-deaf

"id": "wes846072825",
"linkid": "western-pa-school-for-the-deaf",
"type": "Breach",
"date": "7/2023",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 489,
                        'industry': 'Education',
                        'location': 'Pennsylvania',
                        'name': 'Pennsylvania School for the Deaf',
                        'type': 'Educational Institution'}],
 'attack_vector': 'Unauthorized Removal of Information',
 'data_breach': {'data_exfiltration': 'Yes',
                 'number_of_records_exposed': 489,
                 'personally_identifiable_information': 'Yes',
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Names',
                                              'Social Security numbers',
                                              "Driver's license numbers"]},
 'date_detected': '2023-12-26',
 'date_publicly_disclosed': '2023-12-26',
 'description': 'The Pennsylvania School for the Deaf reported a data security '
                'incident involving a cybersecurity breach on December 26, '
                '2023. The breach occurred on July 10, 2023, and involved '
                'unauthorized removal of information, potentially affecting '
                '489 individuals, including personal details such as names, '
                "Social Security numbers, and driver's license numbers. "
                'Identity theft protection services were offered for 12 months '
                'through TransUnion.',
 'impact': {'data_compromised': ['Names',
                                 'Social Security numbers',
                                 "Driver's license numbers"],
            'identity_theft_risk': 'High'},
 'references': [{'date_accessed': '2023-12-26',
                 'source': 'Pennsylvania School for the Deaf'}],
 'response': {'remediation_measures': 'Identity theft protection services '
                                      'offered for 12 months',
              'third_party_assistance': 'TransUnion'},
 'title': 'Data Security Incident at Pennsylvania School for the Deaf',
 'type': 'Data Breach'}