The Maine Office of the Attorney General reported that Whitefish School District experienced a data breach on March 11, 2022, involving an unauthorized user's access to an employee's work computer through a social engineering scam. The breach potentially affected the personal information of 1,755 individuals, including names, addresses, and Social Security numbers. Written notice was provided to one Maine resident on April 5, 2022.
TPRM report: https://www.rankiteo.com/company/whitefish-bay-school-district
"id": "whi209080525",
"linkid": "whitefish-bay-school-district",
"type": "Breach",
"date": "3/2022",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"{'affected_entities': [{'customers_affected': 1755,
'industry': 'Education',
'location': 'Whitefish, Montana',
'name': 'Whitefish School District',
'type': 'Educational Institution'}],
'attack_vector': 'Social Engineering',
'data_breach': {'number_of_records_exposed': 1755,
'personally_identifiable_information': True,
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Personal Information']},
'date_detected': '2022-03-11',
'description': "An unauthorized user gained access to an employee's work "
'computer through a social engineering scam, potentially '
'affecting the personal information of 1,755 individuals.',
'impact': {'data_compromised': ['Names',
'Addresses',
'Social Security numbers']},
'initial_access_broker': {'entry_point': "Employee's Work Computer"},
'post_incident_analysis': {'root_causes': 'Social Engineering Scam'},
'references': [{'source': 'Maine Office of the Attorney General'}],
'threat_actor': 'Unauthorized User',
'title': 'Whitefish School District Data Breach',
'type': 'Data Breach',
'vulnerability_exploited': 'Human Error'}