Georgia-based art school Savannah College of Art and Design had hundreds of students' and employees' data exposed following a recent ransomware attack, reports The Record, a news site by cybersecurity firm Recorded Future.
Despite having its information network systems infiltrated by threat actors, SCAD noted that early detection and response to the incident averted any operational impact.
"After a forensic investigation, SCAD has reason to believe that a limited number of files containing personal information of certain current and former students and employees were accessed by the unauthorized actor responsible for the incident," said a SCAD spokesperson.
While SCAD did not name its attacker, it has been added by the AvosLocker ransomware gang to its leak site over the weekend, where it was demanded by the ransomware group to pay an undisclosed amount within two weeks. At least 69,000 SCAD files, including student, personnel, and business data, have been leaked by AvosLocker, according to DataBreaches.net.
The attack on SCAD marks the 24th ransomware attack against U.S. colleges and universities this year, noted Emsisoft Threat Analyst Brett Callow.