Student's intrusion into school accounts affects up to 16 schools in Iceland
A student in Iceland exploited a login vulnerability in the shared school administration system Inna to gain unauthorized access to staff and student accounts at other schools and attempt to alter grades and attendance records. Several schools detected irregularities in their records and reported them to the data protection authority. The data protection regulator determined that 16 schools were affected and is investigating whether any records were successfully altered and the extent to which personal information was viewed.
Key facts
- Affected organization
- Being confirmed
- Incident type
- Hacking & intrusion
- Occurred / detected
- Not confirmed
- Scale of damage
- Unauthorized access to school administration accounts at up to 16 schools
- Cause / method
- Exploitation of a login vulnerability in the shared school administration system Inna
- Location
- Iceland
Timeline
- A student's unauthorized access to school administration accounts and attempts to alter grades and attendance records came to light, and authorities investigated the impact on 16 schools and the actual extent of access and alterations.
- It was disclosed that the privacy breach affected up to 16 schools.
3 related reports
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organization’s official statements for accurate details.