data breach

East Valley Institute of Technology reports January 2024 data breach

Metro Creative

EVIT has implemented several measures to ensure that information is protected from future unauthorized disclosures

Posted Saturday, September 7, 2024 2:41 pm

What information was involved

For individuals who may have been impacted by the breach, the categories of impacted information may include: Class List, Student ID Number, Date of Birth, Race/Ethnicity, Grades, Course Schedule, Home Phone Number, Email Address, Home Address, Parent/Guardian Name, Transcript, IEP/504 Plan, SSN, Driver’s License or State ID, Financial Aid Information, Class Rank, Place of Birth, TIN, Tribal ID Number, Account Number, Routing Number, Health Insurance Information, Account Type, Disciplinary File, Medical Information, Absence Reason, Financial Aid Account Number, Health/Allergy Information, Diagnosis, Patient ID Number, Institution Name, Health Insurance Policy Number or Subscriber Number or Policy Number, US Alien Registration Number, Medical Record Number, Treatment Location, Payment Card Number, Mental or Physical Condition, Treatment Type, Prescription Information, Passport Number, Treatment Information, Username with Password Pin or Login Information, Patient Account Number, Biometric Data, Mental or Physical Treatment, Diagnosis Code, Payment Card Type, Military ID Number.

The potentially compromised information varies by individual, and for most individuals, not all of this data was potentially compromised.

Source: EVIT

A cyber incident in January potentially impacted the personal information of current and former students, faculty and parents of the East Valley Institute of Technology, it states at EVIT’s website.

EVIT has implemented several measures to ensure that information is protected from future unauthorized disclosures. EVIT has notified appropriate authorities, as well as provided email notification to all current and former students, staff, faculty and parents, it states.

East Valley Institute of Technology offers 50 career training programs for Phoenix-area adults and high school students who reside in 11 East Valley school districts – Apache Junction, Cave Creek, Chandler, Fountain Hills, Gilbert, Higley, J.O. Combs, Mesa, Queen Creek, Tempe and Scottsdale.

Cyber incident

On Jan. 9, 2024, EVIT was the target of a cyber incident that involved unauthorized access to the network. This attack had a limited impact on EVIT’s operations, it states at https://www.evit.edu/about-evit/district-departments/information-systems/notice-of-january-breach.

“We immediately took corrective steps to investigate the incident, secure our systems, report the incident to law enforcement, contain and remediate the threat, and notify potentially impacted individuals,” it states.

EVIT has not discovered any publication of EVIT data that contained sensitive information. However, given the possibility that sensitive information may have been compromised, EVIT engaged a third party to conduct a review of all potentially impacted files. This review concluded on June 4. EVIT then worked with another third party to perform a physical address search, which was completed on Aug. 7, it states at the website.

Once the contracted third party completed the impacted file investigation and identified potentially impacted individuals by name, EVIT posted a website notice and worked to send individual notice to anyone identified as potentially impacted by the breach.

EVIT mailed notification letters to physical addresses identified by its notification service vendor on Aug. 13. All potentially impacted individuals are eligible to receive credit monitoring and other related services. You can find more information about those services here: https://response.idx.us/EVIT.

For information, email evit-notifications@evit.edu or go to https://response.idx.us/evit/ where frequently asked questions are posted in connection with free credit monitoring and related services being offered.