Irony, thy name is SANS: 28k records nicked from infosec training org after staffer's email account phished

Irony, thy name is SANS: 28k records nicked from infosec training org after staffer's email account phished

Updated Cybersecurity training organisation the SANS Institute suffered the loss of 28,000 items of personally identifiable information (PII) after a staffer's email account was accessed by malicious people.


SANS published some details of the breach on its website. One person was phished, leading to the compromise of their email account.


Data taken included names, email addresses, phone numbers, job titles, company names, postal addresses and country of residence. Around 28,000 items of data were taken.


In a statement on its website, SANS said: "Aside from the affected user, we currently believe that no other accounts or systems at SANS were compromised."


SANS digital forensics instructors are heading up the investigation into what went wrong, with the organisation adding: "We are working to ensure that no other information was compromised and to identify opportunities ..

Support the originator by clicking the read the rest link below.