Report: 7 in 10 Attempted Data Breaches in Education Are Financially Motivated

Nearly three-quarters, 70 percent, of cybersecurity incidents in education are motivated by the possibility of financial gain, according to Verizon's 2018 Data Breach Investigations Report (DBIR).

One in five attacks on educational institutions were motivated by espionage, often targeting sensitive research, and 11 percent of attacks are "just for fun," according to the report.

This year's report looked at more than 53,000 incidents and 2,300 data breaches from five countries. For the purposes of the report, an "incident" is defined as, "A security event that compromises the integrity, confidentiality or availability of an information asset," whereas a data breach is, "An incident that results in the confirmed disclosure — not just potential exposure — of data to an unauthorized party."

Human beings are a major security weakness across all industries, with companies being "nearly three times more likely to get breached by social attacks than via actual vulnerabilities," according to information released by Verizon.

Financial pretexting — attacks in which the attacker tricks someone into releasing information under false pretenses, such as telling the victim they are conducting a survey or pretending they are a customer who has lost their login information — has boomed, increasing fivefold over the last year. More than half of the financial pretexting attacks recorded by Verizon this year were targeted specifically at human resources staff.

Also across all industries, ransomware was the most prevalent form of malicious software, accounting for 39 percent of malware attacks.

Key findings of the report specific to the education industry include:

  • There were 292 incidents recorded, with 101 confirmed to have disclosed data;
  • Most attackers, 81 percent, were from outside the organization, with internal actors accounting for only 19 percent of attacks;
  • Of the data compromised in attacks on educational institutions, 72 percent was personal, 14 percent some kind of secrets and 11 percent medical;
  • Hacking is the most common action type for incidents in education, accounting for 72 percent of all incidents — largely because of the prevalence of denial-of-service attacks against educational institutions — and 44 percent of breaches; and
  • 14 percent of education breaches featured a causal error by an employee.

To read the full report, visit verizonenterprise.com.

About the Author

Joshua Bolkan is contributing editor for Campus Technology, THE Journal and STEAM Universe. He can be reached at [email protected].

Featured

  • teacher

    6 Policy Recommendations for Incorporating AI in the Classroom

    The Southern Regional Education Board's Commission on AI in Education has published six recommendations for states on adopting artificial intelligence in schools, colleges, and universities. The guidance marks the commission's first release since it was established last February, with more recommendations planned in the coming year.

  • Stylized illustration showing cybersecurity elements like shields, padlocks, and secure cloud icons on a neutral, minimalist digital background

    Microsoft Announces Security Advancements

    Microsoft has announced major security advancements across its product portfolio and practices. The work is part of its Secure Future Initiative (SFI), a multiyear cybersecurity transformation the company calls the largest engineering project in company history.

  • minimalist digital network with glowing interconnected lines and nodes

    Integration Brings Cerebras Inference Capabilities to Hugging Face Hub

    AI hardware company Cerebras has teamed up with Hugging Face, the open source platform and community for machine learning, to integrate its inference capabilities into the Hugging Face Hub.

  • illustration with geometric shapes, digital circuitry, and subtle icons of an open book, graduation cap, and lightbulb

    University of Michigan Launches Agentic AI Virtual Teaching Assistant

    At the University of Michigan's Stephen M. Ross School of Business, a new Virtual Teaching Assistant pilot program is utilizing agentic AI to provide students with 24/7 access to support and self-directed learning.