Prescott College

Prescott College is an educational institution headquartered in the United States. Its core function involves providing academic programs and services to students and affiliated individuals. The institution operates within the higher education sector, focusing on delivering instruction and managing associated administrative functions for its enrolled population. As part of its operations, Prescott College collects and maintains sensitive personal information related to its student body and other individuals connected to its activities.

In October 2022, Prescott College experienced a significant cybersecurity incident impacting its information technology infrastructure. On October 26th, an unauthorized actor gained access to the college's systems. This intrusion resulted in the compromise of confidential data pertaining to students and affiliated individuals. The attacker successfully exfiltrated files containing sensitive personal information, including names and driver's license numbers, before their access was terminated. Following the discovery of the breach, Prescott College initiated a thorough investigation with the assistance of external cybersecurity professionals. This investigation confirmed the unauthorized access and data removal, allowing the college to identify the specific individuals whose information was exposed. As a result, Prescott College fulfilled its legal obligations by issuing formal breach notifications to all impacted parties. The incident prompted the institution to implement enhanced system security measures and collaborate with relevant law enforcement agencies to address the intrusion and its consequences. This breach underscores the challenges educational institutions face in protecting sensitive personal data entrusted to them.