Cyberattack at NSC Affects 890 Schools

A major nonprofit has disclosed a major databreach that has affected 890 schools across the United States. The NationalStudent Clearinghouse (NSC) has announced that they have been the victim of adata breach that has put its clients’ data at risk. Let’s take a look at whatthis means.

It’s an Official Breach

This information comes from the Office of theCalifornia Attorney General. NSC administrators have claimed that attackerssuccessfully gained access to the MOVEit managed file transfer server on May30, 2023, and were able to make off with files containing a vast array ofpersonal information that includes names, dates of birth, contact information,Social Security numbers, student ID numbers, and some other school-relatedrecords.

U.S. educational nonprofit National StudentClearinghouse (NSC) has disclosed a data breach affecting 890 schools using itsservices across the United States. If you would like to learn more about thebreach, you can access the official report from the organization here.

The organization provides educationalreporting, data exchange, verification, and other services to over 22,000secondary schools and around 3,600 colleges nationwide. Overall, it has beenestimated that over 50,000 individuals have had some form of personallyidentifiable information (PII) leaked in the attack.

Ransomware Group Behind theAttacks

By using a zero-day security flaw in NSC’sMOVEit managed file transfer system, the Clop ransomware gang has claimedresponsibility for the NSC data theft. After gaining access to the server onMay 27, it started extorting organizations that fell victim to the attacks,threatening to leak information on the dark web if ransom was not paid. As ofthis writing, only a limited number of affected organizations have given in toClop’s ransom demands, but those responsible are expected to collect tens ofmillions of dollars from the breach.

Do What You Can to Protect YourSensitive Data

You might not work with thousands of otherorganizations, but you do hold some sensitive information that could hinderyour business if it were to be stolen. Furthermore, no organization wants to bethe victim of a ransomware extortion scheme. If you are concerned that you areapt to be exposed to cybercriminals, there are a lot of things you can do. Wecan help! Give our IT security experts a call today at (954) 628-3770. to learnhow.

‍