Intelligent CISO Issue 78 | Page 24

UPDATES
1
2
2
1

threat

UPDATES
1
CANADA
Toronto District School Board has confirmed an unauthorised third party gained access to its technology testing environment earlier this year . This is a separate environment used by TDSB IT Services to test programs before they are run live on its systems .
A statement from the organisation said : “ We have now confirmed that the testing environment contained 2023 / 2024 student information that could include name , school name , grade , TDSB email address , TDSB student number and day / month of birth .
“ We want to emphasise that , at this time , our cybersecurity teams and external security partners have advised that the risk to our students in connection with this cyberincident is low and that they have not seen any public disclosure of student data as part of their investigations , which includes monitoring of the Dark Web and other online locations .”
2
UK
Transport for London ( TfL ) was targeted in a cyberattack .
The organisation stated there was no evidence of customer data being compromised and no impact on its services .
But Andrew Brown , Software Security Expert at Propel Tech , said : “ The TfL cybersecurity incident should be viewed as a sizeable near miss in the realm of cybersecurity . It serves as a reminder for organisations in charge of mass transit , both in the UK and further afield , just how much of a lucrative target this type of infrastructure is for bad actors .
“ It seems those in charge of cybersecurity at TfL have managed to get ahead of this with a rapid response , protecting both consumer data and ensuring zero disruptions to users – an impressive feat . However , just because they ’ ve thwarted it this time doesn ’ t mean they can get complacent .”
2
1
24 WWW . INTELLIGENTCISO . COM