Washington D.C., March 9, 2023 — The Securities and Exchange Commission today announced that Blackbaud Inc., a South Carolina-based public company that provides donor data management software to non-profit organizations, agreed to pay $3 million to settle charges for making misleading disclosures about a 2020 ransomware attack that impacted more than 13,000 customers. The SEC’s…
Category: Education Sector
Israel publicly blames Iran for cyberattack on major university last month
Times of Israel reports: The Israel National Cyber Directorate announced Tuesday that a group affiliated with Iranian intelligence was behind an internet attack last month on the Technion, a top Israeli research and education institute. In a statement, the directorate said an investigation found the attack was carried out by a group known as MuddyWater,…
Medusa claims responsibility for Minneapolis Public Schools’ “encryption event,” provides proof of how much data they accessed
There’s another update to the “encryption event” first disclosed by Minneapolis Public Schools (MPS) in February. As of their most recent last update, MPS had stated that they had been able to restore systems and no ransom had been paid. At that time, DataBreaches had not found any gang claiming responsibility for the breach or…
Tennessee State, Southeastern Louisiana universities hit with cyberattacks
On March 2, Jonathan Greig reported: Two universities in Tennessee and Louisiana are struggling with cyberattacks that have crippled campus services and left students scrambling to find alternative tools. Tennessee State University — a public historically black land-grant university in Nashville — notified its more than 8,000 students on Wednesday that its IT systems were…
Hacker stole bank account, Social Security numbers, and health plan info of Colorado school district employees
Updated March 15: This incident was reported to HHS on March 3 as affecting 35,068 health plan members, so it likely included former employees as well as current ones. DPS’s notice can be found on their website. Nate Lynn reports: Personal information belonging to some 15,000 Denver Public Schools (DPS) employees was stolen in what…
Minneapolis Public Schools systems restored, no ransom paid
Jeremiah Jacobsen has an update to the “encryption event” previously disclosed by Minneapolis Public Schools (MPS). [Note: MPS’s phrase “encryption event” appeared to be a ridiculous — and dare we say, sleazy– attempt not to call it a “ransomware attack.” The district still has not described it as ransomware attack.] Minneapolis Public Schools released a…