Supply chain
β Supply Chain
890 Schools Third-Party Breach (September 2023)
Primary Source βIncident Details
National Student Clearinghouse data breach impacts 890 schools. U.S. educational nonprofit National Student Clearinghouse has disclosed a data breach affecting 890 schools using its services across the United States. U.S. educational nonprofit National Student Clearinghouse (NSC) has disclosed a data breach affecting 890 schools using its services across the United States. In a breach notification letter filed with the Office of the California Attorney General, Clearinghouse said that attackers gained access to its MOVEit managed file transfer (MFT) server on May 30 and stole files containing a wide range of personal information. Third-party company: National Student Clearinghouse (NSC).
Technical Details
- Initial Attack Vector
- Compromise of third-party service provider / vendor relationship
- Vendor / Product
- National Student Clearinghouse (NSC)
- Supply Chain Attack
- β Confirmed third-party / vendor compromise
Timeline
- 2023-09-01 Breach occurred
- 2023-09-23 Publicly disclosed