I didn't react as strongly as you did to this one because it seemed somewhat limited to me, especially compared to other leaks I've reported that include entire psycho-educational evals and psychiatric reports.

But even with the really really bad ones, I never see US Education Department do anything or take any real action. Hell, I don't even see states do anything to hold districts accountable when there are leaks of really sensitive data.

#EduSec #databreach

@douglevin @brett @mkeierleber @michaelfklein

For your "No need to hack if it's leaking" files:

"Confidential student information was unintentionally leaked in Naperville Central’s School Improvement Plan, which was released publicly on Friday, Sept. 20. It was removed on Tuesday, Sept. 24 around 3:35 p.m. when Central Times staff brought the breach to the attention of Principal Jackie Thornton."

Read more at https://www.centraltimes.org/showcase/2024/09/26/confidential-student-information-released-in-district-203-data-leak/

#EduSec #exposure #leak #databreach #FERPA

@douglevin @funnymonkey @brett

Confidential student information released in District 203 data leak

^{Central Times}

I have yet to see an actual case like that in the Education sector.

Because chatgpt kept claiming it has happened, I pushed chatgpt to give me one specific example. It responded:

"One specific example is the 2021 breach of the Cypress-Fairbanks Independent School District in Texas. In this incident, hackers leaked fake student data, including fictional names and grades, as part of a ransomware attack. The perpetrators created the false records to make it appear as though they had accessed real sensitive information, causing confusion and concern within the district and the community."

They followed up on my next question by saying that the ransomware group was Vice Society.

But I have no record of any incident like that, so either I missed something or chatgpt is making shit up. :)

#EduSec #AI #FakeData #chatgpt #databreach

Fortinet: Notice of Recent Security Incident
Fortinet comes clean and has a public statement about the alleged hack:

An individual gained unauthorized access to a limited number of files stored on Fortinet’s instance of a third-party cloud-based shared file drive, which included limited data related to a small number (less than 0.3%) of Fortinet customers.

I don't want to regurgitate the entire thing, just click on the link to read it.

#fortinet #incidentresponse #cyberattack #databreach #news

Notice of Recent Security Incident | Fortinet Blog

Fortinet shares information on a recent security incident involving Fortinet and our response to-date.…

^{Fortinet Blog}