Breach

Attackers who infiltrated Change Healthcare using unsecured account credentials were not only able to exfiltrate individuals' names, birthdates, home and email addresses, Social Security numbers, and other government IDs but also their health insurance details, diagnoses, test and imaging results, treatment plans, and banking details.

INC Ransom alleged that it was not only able to exfiltrate Stark's supply chain details, building plans, instructor passports, and cybersecurity tool configurations but also reconnaissance satellite and production program information, as well as documents from its parent firm IAI North America.

Infiltration of PowerSchool's student information systems via stolen customer support portal credentials has primarily impacted the Toronto District School Board, which had data from over 1.48 million students and over 90,000 teachers exfiltrated, followed by the Peel District School Board, which is also in Canada, and the Dallas Independent School District.

In a post on its leak site on Wednesday, RansomHub asserted that it was able to exfiltrate 400 GB of data from American Standard's network servers while threatening the firm to enter ransom payment negotiations in just over five days.

Aside from the possible compromise of names, birthdates, genders, home addresses, phone numbers, and health card digits, TDSB students enrolled beginning Sep. 2017 may have also had their parent, guardian, or caregiver contact details and certain medical data leaked.

"This compromise was quickly contained and our technology environment is currently considered to be free of known malicious activity as confirmed by our third-party security experts," said a Conduent spokesperson, who did not confirm whether the intrusion involved ransomware or data exfiltration.

The recent breach of PowerSchool, a widely used student and teacher management software platform, is a stark reminder of the precarious state of cybersecurity in the U.S. education sector.