Michigan State University
July 24, 2023
•[ leak, misconfiguration, education ]
Michigan State University (MSU) posts a notice on its website describing a third-party data breach that occurred at two vendors used by the University: the Teachers Insurance and Annuity Association (TIAA) and the National Student Clearinghouse ("NSC") both data breaches were related to the file transfer program MOVEit, resulting in the potential exposure of student and retiree data.
University at Buffalo
July 21, 2023
•[ leak, sqlinjection, education ]
The University at Buffalo confirms to have suffered a data breach occurred exploiting the MOVEit CVE-2023-34362 vulnerability against the National Student Clearinghouse.
St. Petersburg College
July 21, 2023
•[ leak, sqlinjection, education ]
The St. Petersburg College confirms to have suffered a data breach occurred exploiting the MOVEit CVE-2023-34362 vulnerability against the National Student Clearinghouse.
Wake Forest University
July 18, 2023
•[ ransomware, malware, education ]
The Wake Forest University is added to the list of the victims of the Clop ransomware gang exploiting the CVE-2023-34362 vulnerability.
University of Alaska
July 18, 2023
•[ ransomware, malware, education ]
The University of Alaska is added to the list of the victims of the Clop ransomware gang exploiting the CVE-2023-34362 vulnerability.
Loyola University
July 18, 2023
•[ ransomware, malware, education ]
The Loyola University is added to the list of the victims of the Clop ransomware gang exploiting the CVE-2023-34362 vulnerability.
Buckingham County Public Schools
July 22, 2023
•[ hack, education ]
Buckingham County Public Schools sends notifications to parents of 86 students after a compromise of a district's business email account.
University of Oklahoma
July 18, 2023
•[ ransomware, malware, education ]
The University of Oklahoma is added to the list of the victims of the Clop ransomware gang exploiting the CVE-2023-34362 vulnerability.
University of Idaho
July 18, 2023
•[ ransomware, malware, education ]
The University of Idaho is added to the list of the victims of the Clop ransomware gang exploiting the CVE-2023-34362 vulnerability.
University of Delaware
July 18, 2023
•[ ransomware, malware, education ]
The University of Delaware is added to the list of the victims of the Clop ransomware gang exploiting the CVE-2023-34362 vulnerability.
Idaho State Board of Education
July 14, 2023
•[ leak, sqlinjection, education ]
The Idaho State Board of Education posts a notice of data on its website after learning that two of the Board's vendors, the Teachers Insurance and Annuity Association ("TIAA") and the National Student Clearinghouse ("NSC"), experienced data breaches related to the file-transfer software MOVEit.
Hamilton College
July 11, 2023
•[ hack, sqlinjection, education ]
The Hamilton College confirms to have suffered a data breach occurred exploiting the MOVEit CVE-2023-34362 vulnerability.
Webster University
July 7, 2023
•[ hack, sqlinjection, education ]
The Webster University confirms to have suffered a data breach occurred exploiting the MOVEit CVE-2023-34362 vulnerability.
Proskauer Rose
July 6, 2023
•[ hack, malware, education ]
The law firms Proskauer Rose is listed by the Cl0p gang among the victims of a data breach occurred exploiting the MOVEit vulnerability.
University of Illinois
July 3, 2023
•[ leak, sqlinjection, education ]
The University of Illinois confirms to have suffered a data breach occurred exploiting the MOVEit CVE-2023-34362 vulnerability.
University of Salerno
June 30, 2023
•[ ransomware, malware, education ]
The University of Salerno is hit with a Rhysida ransomware attack.
Pearson Edexcel
June 30, 2023
•[ leak, education ]
Cambridgeshire Police says they are in the "early stages" of investigating a "data breach" involving exam boards Pearson Edexcel.
OCR
June 30, 2023
•[ leak, education ]
Cambridgeshire Police says they are also investigating a "data breach" involving exam boards OCR
Wooster College
July 7, 2023
•[ hack, sqlinjection, education ]
The Wooster College confirms to have suffered a data breach occurred exploiting the MOVEit CVE-2023-34362 vulnerability.
Pace University
July 7, 2023
•[ leak, sqlinjection, education ]
The Pace University confirms to have suffered a data breach occurred exploiting the MOVEit CVE-2023-34362 vulnerability.
