Healthcare may be the most heavily targeted industry for data breaches, but that doesn't mean other industries shouldn't take precautions to protect their data. Palo Alto Unified School District (PAUSD) was recently informed that their student and parent data was exposed to unauthorized users. Schoolzilla handles the data warehousing and reporting information for PAUSD.
How It Happened
On April 4, 2017 while a security researcher was performing a network security analysis he identified a security risk and immediately notified Schoolzilla of the problem. Schoolzilla recently performed an upgrade to their backup systems and due to a configuration error in this process left open access to the school districts files. Once Schoolzilla was notified of the issue they immediately fixed the issue, and contacted the individual who had accessed the files to have him dispose of the data. Through their data logs they confirmed that only the security researcher had accessed those files. The security analyst has agreed to a sworn statement that all files involved in this breach have been disposed of.