Education Sector

University of Michigan: Leaked emails, passwords were from ‘3rd-party data breaches’

Nisa Khan reports: University of Michigan students got a scare Friday night: warnings circulating on social media about an apparent data breach leaking their U-M email addresses and passwords. On Saturday, the University of Michigan released a statement saying the information was from older “third-party data breaches, such as Chegg, Zynga, LinkedIn” where users used their student emails to...

BBC got to spectate ransomware negotiations with NetWalker

Oh, this is a bit different.  Joe Tidy of BBC reports that BBC got an anonymous tipoff about NetWalker’s ransomware negotiations with the University of California San Francisco and was able to spectate the chat negotiations. BBC’s report includes snippets of the negotiations such as when the uni counter-offered $780,000 to the threat actors’...

NYS: Comptroller’s audits continue: Urban Choice Charter School

For a number of years now, I’ve noted NYS comptroller audits of school districts when it comes to IT and infosecurity.  Here’s one that was recently released concerning Urban Choice Charter School in Rochester: Issued Date June 12, 2020 Audit Objective Determine whether the Board and School officials ensured information technology (IT) assets were...

UCSF admits it paid NetWalker more than $1 million ransom

On June 4, this site noted that NetWalker ransomware operators had added the University of California at San Francisco (UCSF) to their website where they name victims who have not paid their ransom demands. I did not expect the university to pay, commenting, at the time, “I wonder if the threat actors know how...