This morning, we’re learning about the Sans Institute, an edducation portal for cybersecurity professionals and people interested in the field like myself got breached.
Since they’re an institution, they charge for their courses and they recently added some new ones. I receive Sans News Bites which I’ve read for quite awhile although not of late. Some of the things may be blogged, while others not so much.
According to cyberscoop, The SANS Institute, which trains cybersecurity professionals around the world, was hacked, resulting in the compromise of 28,000 records of personally
identifiable information, the organization said Tuesday.
The Maryland-based research and educational outfit said the breach was the result of a single phishing email sent to a SANS employee, which led to more
than 500 of the organization’s emails being forwarded. The breached data included names, email addresses, and physical addresses — information submitted
by attendees of a recent SANS virtual training event.
After discovering the breach on Aug. 6, SANS said it “quickly stopped any further release of information” from the compromised email account, which was forwarding the data to an “unknown external email
address.” The institute did not identify who was responsible for the hack.
The fact that Phishing was the leading cause is not surprising according to the article. Even the best make mistakes, and its bound to happen.
Can the institute learn from this mistake? The news is that they were right on it after discovering there was a problem, and that is what you want. If I see anything else, I’ll be sure to pass it along as I think people should see this.
Cyberscoop: SANS Institute, which drills cyber professionals in defense, suffers data breach is where you can read more. Today they just released new courses and hopefully new students won’t be effected.
Discover more from Jared's Technology podcast network
Subscribe to get the latest posts sent to your email.