Supply chain β›“ Supply Chain

890 Schools Third-Party Breach (September 2023)

πŸ“… 2023-09-01 🏒 National Student Clearinghouse (NSC)
Primary Source β†—

Incident Details

National Student Clearinghouse data breach impacts 890 schools. U.S. educational nonprofit National Student Clearinghouse has disclosed a data breach affecting 890 schools using its services across the United States. U.S. educational nonprofit National Student Clearinghouse (NSC) has disclosed a data breach affecting 890 schools using its services across the United States. In a breach notification letter filed with the Office of the California Attorney General, Clearinghouse said that attackers gained access to its MOVEit managed file transfer (MFT) server on May 30 and stole files containing a wide range of personal information. Third-party company: National Student Clearinghouse (NSC).

Technical Details

Initial Attack Vector
Compromise of third-party service provider / vendor relationship
Vendor / Product
National Student Clearinghouse (NSC)
Supply Chain Attack
βœ… Confirmed third-party / vendor compromise

Timeline

  1. 2023-09-01 Breach occurred
  2. 2023-09-23 Publicly disclosed