Major Data Breach at Ohio School District

Cyber-criminals have exfiltrated data from an Ohio school district and published personal information of faculty, staff, and students online.

According to 13abc news, nearly 9GB of sensitive data belonging to Toledo Public Schools (TPS) has been exposed. Information leaked by attackers includes names, addresses, dates of birth, phone numbers, and Social Security numbers. 

The data's appearance online follows a Distributed Denial of Service (DDoS) attack that was carried out against the TPS system at the beginning of September 2020. The attack on the district's system forced administrators to temporarily take it offline, disrupting virtual classes. 

Since data is not typically stolen in a DDoS attack, it seems that the TPS system was also the victim of another cyber-attack in which malware was introduced that exfiltrated data. Ransomware attacks have occurred at around 70 school districts and colleges this year, according to Emsisoft's Brett Callow. 

On September 14, ransomware gang Maze claimed to have attacked the Toledo Public School System, but the data dumped as proof of the hit related to a construction firm. However, a subsequent data dump carried out earlier this month by Maze has been confirmed to 13abc by several TPS staff members to contain data that belongs to TPS.

The full extent of the data breach is unclear, as Maze claims to have only published a small portion of the information it has exfiltrated from TPS. 

..

Support the originator by clicking the read the rest link below.