Southern Association of Independent Schools (SAIS) Data Breach
The Lyon Firm is investigating an alleged Southern Association of Independent Schools data breach. The firm has filed several data privacy cases nationwide and has experience filing data theft claims on behalf of victims.
A cybersecurity researcher has recently discovered and reported to WebsitePlanet an open database that contains 680k private records. An investigation identified that these records were related to educational institutions, specifically to the Southern Association of Independent Schools, Inc (SAIS).
The database had been mistakenly configured to be non-password protected and appeared on the SAIS primary server. The breach researcher was unable to determine how long the database had been compromised or if it was accessed by unauthorized individuals, but noted that it was ripe for criminals to take advantage of the data it contained. He called it “among the most sensitive data collections I have ever encountered.”
What personal data did the SAIS database contain?
The documents ranged in date from 2012 to the present. The database allegedly contained a large collection of sensitive records which included various types of student and teacher files. The data included health information, teacher background checks, Social Security numbers (SSN), active shooter and lockdown notifications, maps of schools and financial budgets.
Third-party security reports were posted and reviewed weaknesses in school security, locations of cameras, as well as access and entry points. The database was quickly secured from public access.
What is Southern Association of Independent Schools (SAIS)?
SAIS is a non-profit organization that supports educators in the United States and other countries. SAIS has been in operation for over 40 years and is the largest regional independent school association in the country.
SAIS accreditation requires a range of detailed information from each school which is why the database contained a great deal of data like
faculty credentials, qualifications, degrees, certifications, background checks, and professional development records. School financial statements and budget reports may have been accessed.
Other notable documents included vehicle registrations, insurance policies, tax records, training documents, manuals, and other miscellaneous guides or certificates.
How to Proceed following a Data Breach Event
If you would like a free, confidential consultation with a privacy lawyer, contact us by phone or intake form below. We represent thousands of plaintiffs nationwide and aim to reach a quick and worthy settlement for all data theft victims.
The Lyon Firm is a law firm experienced in data breach litigation. We are investigating claims of a data theft incident involving data entrusted to Southern Association of Independent Schools (SAIS). If you or a loved one received notice of any data breach contact our attorneys to arrange a free and confidential consult.