Mount Saint Mary College listed on vicesociety leak site

• Ransomware group: vicesociety
• Country: Dominica
• Sector: Education
• Announcement date: February 9, 2023

Mount Saint Mary College has been listed on a ransomware leak site by the threat actor known as vicesociety. The group claims to have successfully infiltrated the institution's networks and has subsequently published a notice regarding the incident on their platform.

The claimed attack and event details

The announcement regarding the targeting of Mount Saint Mary College was created on February 9, 2023. According to the claims made by the vicesociety group, they have gained access to the internal networks of the institution. This type of activity is characteristic of modern ransomware operations, where threat actors seek to compromise organizational infrastructure to facilitate data exfiltration or service disruption.

In many such cyberattacks, threat actors utilize a method known as double extortion. In this scenario, the attackers do not merely encrypt an organization's data to demand a ransom for its decryption; they also steal sensitive information and threaten to publish it on a public leak site if the ransom is not met. This adds significant pressure on the victim, as the threat of public exposure can lead to severe reputational and legal consequences.

Information regarding the leaked data

Despite the claims made by the vicesociety group, there is currently a lack of specific details regarding the breach. The group has not provided any screenshots or detailed information regarding the nature and scope of the allegedly leaked data. Furthermore, no specific information has been provided concerning the total volume of files or the specific size of the data involved in this incident.

• No specific data types or affected categories were named in the listing.

When a threat actor lists an organization without providing immediate evidence or specific file counts, it creates significant uncertainty for the victim organization. The absence of detailed information makes it difficult for security teams to immediately determine the exact scope of the compromise or which specific databases may have been accessed.

About Mount Saint Mary College

Mount Saint Mary College is a private Catholic college located in Newburgh, New York. Founded in 1959 by the Dominican Sisters, the institution offers over 50 undergraduate programs and three graduate degree programs.

Risk assessment and industry implications

This incident may present a risk of exposing the institution's administrative and academic data. Such leaks targeting educational institutions could lead to the misuse of student and staff information or identity theft. Given that the institution operates in the US, the incident may have legal implications under FERPA and relevant state data protection regulations.

Considering the past activities of the vicesociety group, it may be observed that the group has a tendency to target the education sector. This sector is often viewed as an attractive target for cybercriminals due to the high volume of sensitive personal, financial, and academic information maintained by educational bodies.

As a secondary risk, targeted phishing attacks could be conducted using the leaked data. If personal information is exposed, attackers can craft highly convincing social engineering campaigns to target students, faculty, or administrative staff to gain further access to the network or to commit financial fraud.

To defend against such threats, organizations in the education sector typically implement various defensive measures. These include robust network segmentation to prevent lateral movement by attackers, multi-factor authentication (MFA) to secure access to sensitive systems, and continuous monitoring of network traffic to detect unauthorized access. Additionally, regular security awareness training for staff and students is a critical component in mitigating the risk of phishing and other social engineering tactics.