East Valley Institute of Technology reports data breach, exposing 200k individuals
Learn More
The East Valley Institute of Technology (EVIT) is reporting a data breach that compromised the personal and health information of 208,717 individuals, including current and former students, staff, faculty, and parents. The East Valley Institute of Technology (EVIT) is a public career and technical education district located in Mesa, Arizona, serving the eastern part of the Phoenix metro area.
The breach occurred on January 9, 2024, when the LockBit ransomware group, gained unauthorized access to EVIT’s network.
EVIT reports that they have taken multiple remediating actions including changing passwords, revoking unauthorized permissions, deploying Endpoint Detection and Response (EDR) software, replacing virtual servers, locking down VPN access, and performing domain cleanup.
The following types of sensitive information were potentially accessed:
- Names
- Addresses
- Email addresses
- Social Security numbers
- Dates of birth
- Driver’s licenses
- Student ID numbers
- Race/Ethnicity
- Account numbers
- Financial aid information
- Medical diagnosis
- Treatment details
- Prescription information
- Health insurance details
- Mental and physical condition and treatment
- Patient account numbers
- Biometric data
- Login information (usernames and passwords)
- Payment card types
- Military ID numbers
- Other student information
EVIT has notified the affected individuals and emphasized that no evidence has been found of the stolen data being published online. The institute has also reported the incident to the relevant authorities and consumer reporting agencies. As part of their remediation efforts, EVIT is offering one year of free identity protection and identity theft recovery services to those potentially impacted.
