Summary
Written by ThreatClusterfrom victim profile, leak post, screenshotInterlock claims Southeastern Oklahoma State University, a public four-year university in Durant, Oklahoma, had a data breach exposing 710 GB of data. The leak post states the exposed data includes student educational records and employee personal data, with more than 90,000 student names, SSNs, and student IDs, plus Forms 1095-C and more than 490 documents. The post is listed on the group’s site and identifies the victim domain as se.edu, and it claims the breach violates FERPA and the HIPAA Privacy Rule.
Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.
What was taken
Southeastern Oklahoma State University is a public, four-year university located in Durant, Oklahoma. A data breach exposed student educational records (including names, contact information, Social Security numbers, grades, enrollment data, financial aid information, disciplinary records, and medical information contained in educational records). This breach violates the Family Educational Rights and Privacy Act (FERPA), the HIPAA Privacy Rule, and students' common-law privacy rights. The breach affected employee personal data and injury information, including employee name, date of birth, date of injury, as well as Social Security number, Medicare card, and child custody/consent status. More than 90,000 student names, Social Security numbers, and student identification numbers, as well as Forms 1095-C and more than 490 documents.
Leak-site images (1)
Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.