College planning website says no student data was accessed during July breach

Posted at 3:38 PM, Jul 23, 2019
and last updated 2019-09-04 12:48:25-04

NASHVILLE, Tenn. (WTVF) — Tennessee Higher Education Commission said no student data was compromised in the July data breach of it's college planning website vendor.

In July, THEC said in a press release servers that contained student information "encountered a potential incident of unauthorized entry."

However, THEC said data stored on those servers did not include Social Security numbers, financial, driver's license, home address or health information.

The vendor, Graduation Alliance, was used by the THEC to host, a college and career-planning website.

"Immediately upon detecting unusual traffic, the website was taken offline so that a full security assessment could be conducted," the press release said.

According to the release, Graduation Alliance hired independent forensic experts to determine whether any student information was accessed.

On August 30, the investigation concluded that no student data was seen, accessed or stolen by an unauthorized server.

In a statement, Graduation Alliance said no public-facing websites or systems were affected in the breach.

"We are grateful for the diligent and swift actions that our team took to intercept this attack. Protecting the privacy and security of our students and customers' information is a top priority. As we move forward, we will continue to look for opportunities to enhance our cybersecurity and data protection strategy,” a representative for the company said in the statement.