The Dallas Independent School District (Dallas ISD) stated an unauthorized third party accessed their network, compromising sensitive personal data belonging to students and staff as far back as 2010. Dallas ISD confirmed that threat actors removed the data but informed the school it was not disseminated or sold to anyone. A member of Dallas ISD said more forensic analysis is needed in order to determine the full extent of the damage and compromised data. Dallas ISD operates 230 schools in North Central Texas that collectively teach 153,861 students. Stolen data belonging to employees or contractors included first and last names, addresses, phone numbers, Social Security numbers, dates of birth, dates of employment, salary information, and reasons for ending employment. Data pertaining to students comprised first and last names, Social Security numbers, dates of birth, parent or guardian contact information, and grades.
When evaluating a Managed Detection & Response (MDR) service there are 5 critical components that