Cyber Incident Victim: Kent State University
Date:
Sep 2019
Location:
United States of America
Summary
Kent State University experienced a cybersecurity breach compromising over 3,000 student email accounts through credential harvesting attacks. The university's IT department confirmed unauthorized access occurred during two separate incidents, attributing the breach to stolen login credentials. Affected accounts were used to send fraudulent messages, though the institution did not disclose specific data exfiltrated beyond email content. Officials notified impacted individuals and initiated password resets while reinforcing security awareness to mitigate future risks.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
In September 2019, Kent State University disclosed a cybersecurity incident involving unauthorized access to student email accounts. The breach affected over 3,000 students and occurred through two separate credential harvesting attacks. The first incident took place between September 12 and 13, followed by a second attack from September 22 to 23. University officials, including IT department representative Robert Eckman, confirmed the intrusion method involved attackers obtaining legitimate login credentials through deceptive means. The university publicly announced the breach on September 19, one week after the initial compromise began. Credential harvesting techniques typically involve phishing attempts or fake login pages designed to capture user authentication details. No specific technical details about the attack vectors or threat actors were disclosed in the announcement. The timeline indicates attackers maintained intermittent access over an 11-day period spanning both incidents.
The compromised email accounts represented a significant portion of the student population, though the university did not specify exact enrollment figures for context. Kent State's IT department identified the breach through unspecified detection methods but did not elaborate on discovery timelines between initial compromise and public disclosure. No information was provided regarding whether sensitive data beyond email access was exposed or misused. The university directed affected individuals to KentWired.com for additional details but did not outline specific remediation steps for impacted accounts. Credential harvesting attacks target human vulnerabilities rather than technical system weaknesses, suggesting security awareness shortcomings among some users. The incident highlighted ongoing challenges educational institutions face in protecting decentralized account systems against social engineering tactics.