What appears to be a combination list from various databases related to the University of Georgia appeared on a public paste site yesterday. Although the University of Georgia has disclosed a number of breaches in the past six years, none of the breaches this site knows about would account for all the data in this…
Category: Education Sector
Hacktivist who conspired to hack high school football website sentenced to 2 years
Cyrus Farivar reports that Deric Lostutter, aka “KYAnonymous,” whose case has been followed on this site since 2015, was sentenced to two years in federal prison. Lostutter had been instrumental in leaking evidence concerning the Steubenville rape case. Lostutter initially denied his involvement. But in November 2016, he reversed himself and took a plea agreement in exchange for the prosecution dropping…
University of Idaho notifies 257 employees after phishing incident
Not all phishing attempts are spear-phishing for W-2 forms. The University of Idaho is notifying employees whose personal information was in an employee’s email account after the employee fell for a phishing attack. From their notification: On January 24, 2017, we detected that one of our accounts was being used to send phishing email. The…
Sunnyside Unified School District email gaffe exposed employees’ info
Barbara Grijalva and Maria Hechanova report: A pretty big mistake had Tucson’s second largest school district scrambling to make sure its employees won’t be hurt. Personal employee information was accidentally emailed to every Sunnyside Unified School District employee. That’s more than 2,000 people. According to the district’s IT department, at least 559 employees opened that email….
Daytona State College notifies staff of potential W-2 incident
On February 19, I reported that I was finding 2016 W-2 tax statements for sale on the darknet. In that post, I noted that I was not identifying one Florida college I had contacted that day to alert them that at least one of their employees’ W-2 statements was up for sale – and that others might…
Greater Essex County District School Board investigating exposure of staff information on internal network
Maureen Revait reports: BlackburnNews.com has learned personal information of staff members at the Greater Essex County District School Board has been accessed in a possible data breach. An email that was sent out to staff was sent to BlackburnNews.com anonymously. It says information such as the names, dates of birth, social security number and direct deposit…