From Verizon: We’ve re-examined the data within our Data Breach Investigations Report (DBIR) series (2016 and 2017) to focus in on the healthcare sector’s unique profile and security challenges, and particularly the use/abuse of protected health information (PHI). Our 2018 Protected Health Information Data Breach Report (PHIDBR) is underpinned by 1,368 incidents from this caseload…
Search Results for: education
Regulatory Gap: Cybersecurity at K-12 Schools
Nicole Della Ragione and Leora F. Ardizzone report: While data breaches at Equifax, Yahoo, Anthem and Target have made the national news, data breaches at school districts are not as widely publicized. Schools are a treasure trove of children’s personally identifiable information (PII) (e.g., name, address, Social Security number) and protected health information (PHI), as…
Amazon Releases New Guidance on AWS and FERPA
Dian Schaffhauser reports: More than two years after issuing guidance on FERPA compliance and Amazon Web Services, Amazon has updated the whitepaper to lay out the company’s “shared responsibility model” and provide specific guidance on 24 different AWS services. The Family Educational Rights and Privacy Act, in general, calls for schools and agencies to “reasonably…
Former University of North Georgia employee accessed protected student data in Banner
Viktoria Capek-Grey reports: On Monday, Feb. 26, the University of North Georgia’s Office of University Relations emailed all students regarding improper access of Banner information in January. The email cautioned students that a former student employee inappropriately accessed information protected by FERPA (Family Educational Rights and Privacy Act), though it said there is no evidence…
Data breach may have put Pennsylvania teachers’ personal information at risk
Jan Murphy reports: A data breach of a state Department of Education database may have potentially compromised personal information including Social Security numbers of Pennsylvania’s current and former teachers. A red notice was posted at the top of the department’s website through the weekend noting a “security incident on the Teacher Information Management System.” The…
NY: State Comptroller DiNapoli Releases Audit of Cairo-Durham Central School District – Information Technology
Background The Cairo-Durham Central School District (District) serves the Towns of Cairo, Durham, Athens, Catskill, Coxsackie and Greenville in Greene County, Conesville in Schoharie County, and Rensselaerville in Albany County. The District is governed by a Board of Education (Board) composed of nine elected members. The Board is responsible for developing policies, rules and regulations…