Denver Public Schools (DPS)
March 3, 2023
•[ hack, education ]
Personal information belonging to some 15,000 Denver Public Schools (DPS) employees was stolen in what the district is calling a "cybersecurity incident" that went on for a month.
Gaston College
March 3, 2023
•[ ransomware, malware, education ]
Gaston College posts a "System Interruption" notice after the school confirmed that it was the victim of a ransomware attack
White Settlement Independent School District
February 28, 2023
•[ ransomware, malware, education ]
LockBit adds White Settlement Independent School District in Texas to their leak site, with a proof pack that suggests that the threat actors were able to access and may have exfiltrated a lot of files.
Tennessee State University (TSU)
February 26, 2023
•[ ransomware, malware, education ]
Tennessee State University (TSU) posts a "Notice of Suspicious Network Activity" after the institution experienced what it believes to have been a ransomware attack.
TheGradCafe
February 26, 2023
•[ leak, education ]
In February 2023, the grad school admissions search website TheGradCafe suffered a data breach that disclosed the personal records of 310k users. The data included email addresses, names and usernames, genders, geographic locations and passwords stored as bcrypt hashes. Some records also included physical address, phone number and date of birth. TheGradCafe did not respond to multiple attempts to disclose the breach.
Minneapolis Public Schools
February 24, 2023
•[ ransomware, malware, education ]
Minneapolis Public Schools reveals to be experiencing technical difficulties due to an encryption event due to a ransomware attack.
Skidmore College
February 17, 2023
•[ ransomware, malware, education ]
Skidmore College files a notice of data breach after discovering that an unauthorized party was able to access the school's IT network through a ransomware attack.
Paul Smith's College
February 17, 2023
•[ hack, education ]
Paul Smith's College files notice of a data breach after learning that an unauthorized party gained access to its computer systems where they were able to access confidential information belonging to certain students and employees.
Sweetwater Union High School District
February 16, 2023
•[ education ]
Sweetwater Union High School District is hit with 'undefined' outage.
California Northstate University
February 15, 2023
•[ ransomware, malware, education ]
The California Northstate University suffers a leak from the Avos Locker ransomware gang.
University of Hawaii Maui College (UH Hawaii College)
February 15, 2023
•[ hack, education ]
University of Hawaii Maui College (UH Hawaii College) posted notice of a data breach on its website following a February cyberattack.
Technion - Israel Institute of Technology
February 12, 2023
•[ ransomware, malware, education ]
A new ransomware group going by the name 'DarkBit' has hit Technion - Israel Institute of Technology, one of Israel's leading research universities.
Edmonds School District
February 10, 2023
•[ hack, education ]
The Edmonds School District reveals that an "unauthorized actor" was able to get into the school's network and view personal information.
Bridgewater-Raritan Regional School District
February 10, 2023
•[ education ]
The Bridgewater-Raritan Regional School District suffers a breach
D'Youville University
February 8, 2023
•[ hack, education ]
D'Youville University files a notice of data breach after discovering that certain files containing confidential student information were removed from the school's computer network by an unauthorized party
Munster Technological University (MTU)
February 6, 2023
•[ ransomware, malware, education ]
Munster Technological University (MTU) in Ireland announces that its campuses in Cork would be closed following a "significant IT breach and telephone outage." The ALPHV ransomware gang claims responsibility for the attack.
Korean Archaeological Society
January 31, 2023
•[ espionage, education ]
Researchers from Recorded Future discover a new wave of attacks of the Chinese threat actor known as Xiaoqiying, targeting organizations in South Korea.
Nantucket Public Schools
January 31, 2023
•[ ransomware, malware, education ]
Nantucket Public Schools are hit with a ransomware attack.
Tucson Unified School District
January 30, 2023
•[ ransomware, malware, education ]
The Tucson Unified School District is hit with a Royal ransomware attack.
Duolingo
January 24, 2023
•[ leak, misconfiguration, education ]
In August 2023, 2.6M records of data scraped from Duolingo were broadly distributed on a popular hacking forum. Obtained by enumerating a vulnerable API, the data had earlier appeared for sale in January 2023 and contained email addresses, names, the languages being learned, XP (experience points), and other data related to learning progress on Duolingo. Whilst some of the data attributes are intentionally public, the ability to map private email addresses to them presents an ongoing risk to user privacy.
