Mendocino County Office of Education reports suspected Ransomware or data breach
Learn More
Mendocino County Office of Education (MCOE) reported a data breach with a significant delay of five months. The breach occured in March and resulted in a disruption of MCOE's network, which was caused by an "unauthorized individual" gaining access to portions of their network on March 6, 2023.
Although specific details of the breach are still not immediately disclosed by MCOE, it's suspected that a ransomware attack or an account breach is the vector of attack.
The exposed information in the incident is massive and includesa:
- names,
- addresses,
- phone numbers,
- email addresses,
- student identification numbers,
- dates of birth,
- Social Security numbers/IRS PIN numbers,
- passport numbers,
- driver's license/state identification numbers,
- tax identification numbers,
- birth/marriage certificates,
- financial account information,
- medical information/health insurance information,
- fingerprint/iris scan data,
- parent/guardian names,
- place of birth,
- student class lists,
- course schedules/class lists,
- disciplinary information,
- grades,
- class ranks,
- Individualized Educational Plan (IEP) information.
Although MCOE didn't disclose the number of affected individuals they serve 13,500 K-12 students. It can be safely assumed that all of them are exposed in this attack.
The extent of the impacted data is vast and raises serious concerns about potential financial and medical abuses that victims may face, such as identity theft, false tax filings, and health insurance fraud. Medical information and IEP data, in particular, are highly sensitive and confidential, and the compromise of such information can lead to severe consequences for students and families. Special education files, for instance, may include highly personal and sensitive information, including psychological analyses, cognitive testing, and mental and physical health observations.
