Educational Services
NAICS 61

Frecuencia

1,241 incidents, 282 with confirmed data disclosure

Top patterns

System Intrusion, Basic Web Application Attacks, and Miscellaneous Errors represent 80% of breaches

Threat actors

External (75%), Internal (25%) (breaches)

Actor motives

Financial (95%), Espionage (5%) (breaches)

Data compromised

Personal (63%), Credentials (41%), Other (23%), Internal (10%) (breaches)

Top IG1 protective controls

Security Awareness and Skills Training (CSC 14), Access Control Management (CSC 6), Secure Configuration of Enterprise Assets and Software (CSC 4)

What is the same?

This industry continues to be impacted by attacks targeting their external infrastructure and are largely targeted by External actors with Financial motives. However, Educational Services also faces accidents as one of the top causes of breaches." We say 'this industry' too much in the summary.

Resumen

Educational Services follows an eerily similar trend to the majority of the other industries; it is experiencing a dramatic increase in Ransomware attacks (over 30% of breaches). In addition, this industry needs to protect itself against stolen credentials and phishing attacks potentially exposing the personal information of its employees and students.

Patterns

5-Year difference

3-Year difference

Basic Web Application Attacks

No change

Greater

System Intrusion

Greater

Greater

Miscellaneous Errors

No change

Less

Patrón

Difference with peers

System Intrusion

Greater

Basic Web Application Attacks

Less

Miscellaneous Errors

Greater