Security News > 2020 > August > SANS Institute Says 28,000 User Records Exposed in Email Breach
The SANS Institute has disclosed a security incident which resulted in 28,000 records of personally identifiable information being forwarded to an unknown email address.
During the audit, the company identified a forwarding rule on one email account, meant to forward emails to an unknown external address.
Before the leak was identified a total of 513 emails were forwarded to the external email address, the majority of which did not include important information.
"Most of these emails were harmless, but some of these emails contained files with personally identifiable information. As a result, approximately 28,000 records of PII were forwarded to an unknown external email address," SANS reveals.
The company also says that a phishing email was found to be the initial attack vector, and that a single employee's email account was affected, with no other accounts or systems compromised.