Hacker steals 10 years worth of data from San Diego school district

[InfoSec News <alerts () infosecnews org>]

https://www.zdnet.com/article/hacker-steals-10-years-worth-of-data-from-san-diego-school-district/

By Catalin Cimpanu
ZDNet News
December 25, 2018

A hacker has stolen the personal details of over 500,000 San Diego Unified 
School District staff and students; the district revealed in a breach 
notice posted on its website on Friday, before the Christmas holiday.

The breach occurred because the attacker gained access to staff 
credentials via a tactic known as phishing -- sending authentic-looking 
emails that redirect users to fake login pages were attackers collect 
login credentials.

The attack didn't go unnoticed. Some staff reported the funny-looking 
emails to IT staff, who investigated and eventually discovered the breach 
in October this year.

District officials said the hacker had access to its network between 
January 2018 and November 1, 2018, but that he stole student and staff 
data going back to the 2008-2009 school year.

In an email sent to affected victims, district officials said they allowed 
the hacker to operate after their discovery on purpose.


[...]




--
Subscribe to InfoSec News
https://www.infosecnews.org/subscribe-to-infosec-news/
https://twitter.com/infosecnews_