In a recent development, the Education Authority of Alabama successfully thwarted a cyber extortion attempt, although it was confirmed that some information was compromised.
On the 17th of June, cyber adversaries made an attempt to infiltrate and immobilize the organization’s digital infrastructure. Despite their efforts, the attack was largely unsuccessful.
“Nonetheless, prior to our intervention, the attackers managed to exfiltrate certain data and caused a temporary disruption of our operations,” announced the Authority in a press release on Wednesday.
The incident has prompted an ongoing inquiry by federal investigators and the state’s legal advisor. While a major breach was averted, the Authority admitted that there is a likelihood that sensitive personal details may have been accessed.
Specifics regarding the nature of the compromised data have not been disclosed, and the Authority has not provided further comments upon inquiry.
“It remains uncertain what specific data was affected, but there is a potential that the intrusion involved confidential records of both students and staff. We are actively collaborating with federal agencies and cybersecurity specialists to oversee the situation,” they elaborated.
An online resource has been established to keep the public informed about the security breach. “A specialized web page, alabamaachieves.org/databreach, has been created and will be updated with new findings once the investigation concludes,” they added.
The Alabama Education Authority oversees an extensive network of approximately 1,500 educational institutions across 138 districts, catering to roughly 750,000 learners.
While not explicitly acknowledging the incident as a ransomware attack, the Authority has stated its stance against engaging with international cybercriminals, heeding the advice of law enforcement bodies.
Following the incident, the Authority managed to recover and secure its systems using uncontaminated backups and has implemented further protective measures.
The State’s Chief of Education, Eric Mackey, indicated in a media briefing on Wednesday that the Authority’s website would undergo maintenance on the 4th of July, resulting in temporary downtime. The site has since been restored.
This event follows a similar cyberattack earlier this year targeting Birmingham, Alabama, and a recent declaration by Florida’s Health Department of an ongoing investigation into a cybersecurity event after a hacking collective claimed to have seized a significant amount of data.
