According to sources, Mars Area School District (a Education organization in Pennsylvania) was hit with a cyber attack. It was first reported on 2022-10-05.
Source 1 | 2022-10-05
“Mars Area School District officials say the investigation into a cyber security incident is still in the early stages. The district fell victim to a cyber security attack back on September 27th.“
“Officials say they “took immediate action to protect the District systems and began a thorough investigation in consultation with outside cybersecurity and data privacy professionals.“
“The district is currently trying to identify the scope and impact of the incident. Right now, they say current goals are to remove any and all infections from the system and make sure all devices are safe. “
Source 2 | 2022-10-12
“ According to niche.com, MASD is a k-12 district with 3,334 students. In a notice posted on the district’s website on October 3, Superintendent Gross described the progress the district was making in recovering from a ransomware attack they originally disclosed on September 27. In their earliest announcement, the district had indicated that it did not have access to e-mail or to the District’s Internet network, but the phone system was unaffected and that schools would remain open as they worked through the recovery. They had also announced, “at this time, there is no evidence that student or employee records were compromised or at risk.” “
“ As of October 3, the investigation was still in its early stages, and they no longer stated that there was no evidence of student or employee records being compromised. In that update, they wrote, “The District will give appropriate notice to those affected, in accordance with applicable data protection obligations, once we have completed our forensic review.” A preliminary review by DataBreaches of the data leaked by Vice reveals that a lot of old files, some with personal information, have been dumped on the internet for anyone to download. “
“ Of special note: a file with personnel information from 2016-2017 contains information on more than 350 employees with their Social Security Numbers, first and last names, date of birth, work and personal email addresses, and phone numbers. No databases were noted in DataBreaches’ preliminary review, but a number of individual records on employees and students revealed sensitive information on named individuals. “
Guarding Against Ransomware
Cybersecurity for Critical Infrastructure
SecuLore provides Managed Detection and Response (MDR) to protect our nation’s critical infrastructure from cyber threats. Our expertise is built on deep knowledge of 9-1-1 technology, cyberwarfare, and ethical hacking, ensuring the highest level of cybersecurity for public safety agencies.
