{"id":562,"date":"2023-04-17T10:50:57","date_gmt":"2023-04-17T15:50:57","guid":{"rendered":"https:\/\/kentprotect.com\/?p=562"},"modified":"2023-04-17T11:34:31","modified_gmt":"2023-04-17T16:34:31","slug":"breach-report-wisconsin-elmbrook-school-district-breach-by-vice-society-ransomware-group-affects-all-active-employees-and-unknown-total-amends-breach-update-from-7-months-ago","status":"publish","type":"post","link":"https:\/\/kentprotect.com\/index.php\/2023\/04\/17\/breach-report-wisconsin-elmbrook-school-district-breach-by-vice-society-ransomware-group-affects-all-active-employees-and-unknown-total-amends-breach-update-from-7-months-ago\/","title":{"rendered":"Breach Report: Wisconsin Elmbrook School District breach by Vice Society ransomware group affects &#8220;all active employees&#8221; and unknown total, breach updated\/amended from 7 months ago"},"content":{"rendered":"<div class='booster-block booster-read-block'><\/div>\n<p class=\"wp-block-paragraph\">(image source: Elmbrook School District, n.d.)<\/p>\n\n\n\n<p class=\"has-medium-font-size wp-block-paragraph\"><strong>One-sentence summary: <\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Wisconsin Elmbrook School District breach by the Vice Society ransomware group took over 6 months to fully investigate and involved all employees with an unknown total.<\/p>\n\n\n\n<p class=\"has-medium-font-size wp-block-paragraph\"><strong>Who was involved?<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Elmbrook School District of Wisconsin, an unknown number of employees, dependents, or students, the Vice Society ransomware group, and the FBI. <\/p>\n\n\n\n<p class=\"has-medium-font-size wp-block-paragraph\"><strong>What was the timeline?<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">August 23, 2022: Breach starts<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">August 27, 2022: Breach ends<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">September 8, 2022: Elmbrook School District provides initial data breach notice, <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">February 27, 2023: Elmbrook School District discovers the full scope of the data breach <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">March 16, 2023: Elmbrook School District develops an updated breach notice <\/p>\n\n\n\n<p class=\"has-medium-font-size wp-block-paragraph\"><strong>What occurred?<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The Vice Society ransomware group, which has been seen in other school attacks (<a href=\"https:\/\/kentprotect.com\/index.php\/2023\/02\/24\/2000-sensitive-student-records-at-los-angeles-unified-school-district-lausd-breached-in-2022-by-vice-society\/\" target=\"_blank\" rel=\"noreferrer noopener\">such as against LAUSD in 2022<\/a>), breached Elmbrook School District in August 2022 and leaked the data on the dark web (Goldbeck, 2022). Elmbrook School District originally reported the threat actor never demanded a ransom or even interacted with the district (Goldbeck, 2022). Elmbrook School District also initially reported the data involved &#8220;all active employees,&#8221; did not involve social security numbers, and was limited to information such as student educational records (Goldbeck, 2022; Johnson, 2023). However, the information leaked was later clarified to include: &#8220;Social Security numbers, driver\u2019s license numbers, state identification number, medical information, financial account number, payment card number, routing number, card CVV\/expiration date, medical diagnosis\/medical treatment information and health insurance information&#8221; (Elmbrook School District, 2023). Employees, dependents, and students were all identified as potential data breach victims (Goldbeck, 2022). Elmbrook School District is still not listed <a href=\"https:\/\/datcp.wi.gov\/Pages\/Programs_Services\/DataBreaches.aspx\" target=\"_blank\" rel=\"noreferrer noopener\">on the Wisconsin data breach portal. <\/a><\/p>\n\n\n\n<p class=\"has-medium-font-size wp-block-paragraph\"><strong>Estimated costs:<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Associated incident response costs (albeit mitigated by cyber insurance (SC Staff, 2023)), breach notification costs, operational costs (domain-wide password reset) (Goldbeck, 2022), 1 year Experian IdentityWorks service, M-F call center<\/p>\n\n\n\n<p class=\"has-medium-font-size wp-block-paragraph\"><strong>Involved laws: <\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Federal: HIPAA, HITECH, and FERPA<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">State: Wisconsin: Wis. Stat. \u00a7 134.98<\/p>\n\n\n\n<p class=\"has-medium-font-size wp-block-paragraph\"><strong>Root cause: <\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">TBA or N\/A (see disclaimer)<\/p>\n\n\n\n<p class=\"has-medium-font-size wp-block-paragraph\"><strong>Lessons learned: <\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">A 24\/7 SOC is a requirement for a modern organization or business. Chief Strategy Officer Chris Thompson said they just hired a &#8220;security service firm to provide 24\/7 managed services,&#8221; essentially implying they did not have a SOC before (Johnson, 2023). <\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><em>Example solutions<\/em><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">CyberConvoy MDR 24\/7 SOC: https:\/\/www.cyberconvoy.com\/<\/p>\n\n\n\n<p class=\"has-medium-font-size wp-block-paragraph\"><strong>Sources: <\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Elmbrook School District. (n.d.). <em>ElmbrookSchoolslogo.jpg<\/em>. elmbrookschools.org. https:\/\/resources.finalsite.net\/images\/v1533216857\/elmbrookschoolsorg\/x5mldqs8hp0uobyph9eq\/ElmbrookSchoolslogo.jpg<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Elmbrook School District. (2023, March 16). <em>Notice of Security Incident &#8211; Elmbrook Schools<\/em>. Elmbrook Schoos. Retrieved April 17, 2023, from https:\/\/www.elmbrookschools.org\/cyber-notice<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Goldbeck, M. (2022). Elmbrook School District hit by cyberattack; student, staff data posted on dark web. <em>TMJ4 News<\/em>. https:\/\/www.tmj4.com\/news\/local-news\/elmbrook-school-district-hit-by-cyberattack-student-staff-data-posted-on-dark-web<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Johnson, A. (2023, April 10). Data breach at Elmbrook School District exposes personal information about former and current employees. <em>Milwaukee Journal Sentinel<\/em>. Retrieved April 17, 2023, from https:\/\/www.jsonline.com\/story\/communities\/west\/2023\/04\/10\/names-social-security-numbers-exposed-in-data-breach-at-elmbrook\/70077855007\/<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">SC Staff. (2023, April 11). <em>Data breach hits Wisconsin school district<\/em>. SC Media. Retrieved April 17, 2023, from https:\/\/www.scmagazine.com\/brief\/breach\/data-breach-hits-wisconsin-school-district<\/p>\n\n\n\n<figure class=\"wp-block-embed is-type-video is-provider-youtube wp-block-embed-youtube wp-embed-aspect-4-3 wp-has-aspect-ratio\"><div class=\"wp-block-embed__wrapper\">\n<iframe loading=\"lazy\" title=\"Breach Report: Wisconsin Elmbrook School District breach by Vice Society ransomware group\" width=\"640\" height=\"480\" src=\"https:\/\/www.youtube.com\/embed\/I44z0NmJH04?feature=oembed\" frameborder=\"0\" allow=\"accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share\" referrerpolicy=\"strict-origin-when-cross-origin\" allowfullscreen><\/iframe>\n<\/div><figcaption class=\"wp-element-caption\">YouTube\/Blog Notification Post<\/figcaption><\/figure>\n","protected":false},"excerpt":{"rendered":"<p>(image source: Elmbrook School District, n.d.) One-sentence summary: Wisconsin Elmbrook School District breach by the Vice Society ransomware<\/p>\n","protected":false},"author":4,"featured_media":563,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[68,480,3,12,512,13,76,63,274,75,61,11,10,77,74,209,509,511,510,14,69,71,241,43,44,72,70,129,210,8,27,67,119,15,81,116,345],"class_list":["post-562","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-the-breach-report","tag-been-pwned","tag-breach","tag-breach-report","tag-breaches","tag-brookfield","tag-ciso","tag-cloud","tag-computer-security","tag-computers","tag-cyber-security","tag-cybercrime","tag-cybersecurity","tag-dallas","tag-dark-web","tag-data-breach","tag-education","tag-elmbrook","tag-elmbrookschooldistrict","tag-elmbrookschools","tag-executive","tag-have-been-pwned","tag-have-i-pwned","tag-haveibeenpwned","tag-hipaa","tag-hitech","tag-i-been-pwned","tag-i-have-been-pwned","tag-k-12","tag-k12","tag-kent-protect","tag-kentprotect","tag-pwned","tag-ransomware","tag-summary","tag-texas","tag-vicesociety","tag-wisconsin"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.0 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Breach Report: Wisconsin Elmbrook School District breach by Vice Society ransomware group affects &quot;all active employees&quot; and unknown total, breach updated\/amended from 7 months ago - Kent Protect<\/title>\n<meta name=\"description\" content=\"Wisconsin Elmbrook School District breach by the Vice Society ransomware group took over 6 months to fully investigate and involved all employees with an unknown total.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/kentprotect.com\/index.php\/2023\/04\/17\/breach-report-wisconsin-elmbrook-school-district-breach-by-vice-society-ransomware-group-affects-all-active-employees-and-unknown-total-amends-breach-update-from-7-months-ago\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Breach Report: Wisconsin Elmbrook School District breach by Vice Society ransomware group affects &quot;all active employees&quot; and unknown total, breach updated\/amended from 7 months ago - Kent Protect\" \/>\n<meta property=\"og:description\" content=\"Wisconsin Elmbrook School District breach by the Vice Society ransomware group took over 6 months to fully investigate and involved all employees with an unknown total.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/kentprotect.com\/index.php\/2023\/04\/17\/breach-report-wisconsin-elmbrook-school-district-breach-by-vice-society-ransomware-group-affects-all-active-employees-and-unknown-total-amends-breach-update-from-7-months-ago\/\" \/>\n<meta property=\"og:site_name\" content=\"Kent Protect\" \/>\n<meta property=\"article:published_time\" content=\"2023-04-17T15:50:57+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-04-17T16:34:31+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/kentprotect.com\/wp-content\/uploads\/2023\/04\/ElmbrookSchoolslogo.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"700\" \/>\n\t<meta property=\"og:image:height\" content=\"420\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Kyler Kent CISSP\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Kyler Kent CISSP\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/kentprotect.com\\\/index.php\\\/2023\\\/04\\\/17\\\/breach-report-wisconsin-elmbrook-school-district-breach-by-vice-society-ransomware-group-affects-all-active-employees-and-unknown-total-amends-breach-update-from-7-months-ago\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/kentprotect.com\\\/index.php\\\/2023\\\/04\\\/17\\\/breach-report-wisconsin-elmbrook-school-district-breach-by-vice-society-ransomware-group-affects-all-active-employees-and-unknown-total-amends-breach-update-from-7-months-ago\\\/\"},\"author\":{\"name\":\"Kyler Kent CISSP\",\"@id\":\"https:\\\/\\\/kentprotect.com\\\/#\\\/schema\\\/person\\\/f9b4d76bd2f5b5559a08ad2e004a1116\"},\"headline\":\"Breach Report: Wisconsin Elmbrook School District breach by Vice Society ransomware group affects &#8220;all active employees&#8221; and unknown total, breach updated\\\/amended from 7 months ago\",\"datePublished\":\"2023-04-17T15:50:57+00:00\",\"dateModified\":\"2023-04-17T16:34:31+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/kentprotect.com\\\/index.php\\\/2023\\\/04\\\/17\\\/breach-report-wisconsin-elmbrook-school-district-breach-by-vice-society-ransomware-group-affects-all-active-employees-and-unknown-total-amends-breach-update-from-7-months-ago\\\/\"},\"wordCount\":506,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/kentprotect.com\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/kentprotect.com\\\/index.php\\\/2023\\\/04\\\/17\\\/breach-report-wisconsin-elmbrook-school-district-breach-by-vice-society-ransomware-group-affects-all-active-employees-and-unknown-total-amends-breach-update-from-7-months-ago\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/kentprotect.com\\\/wp-content\\\/uploads\\\/2023\\\/04\\\/ElmbrookSchoolslogo.jpg\",\"keywords\":[\"been pwned\",\"breach\",\"breach report\",\"breaches\",\"brookfield\",\"ciso\",\"cloud\",\"computer security\",\"computers\",\"cyber security\",\"cybercrime\",\"cybersecurity\",\"dallas\",\"dark web\",\"data breach\",\"education\",\"elmbrook\",\"elmbrookschooldistrict\",\"elmbrookschools\",\"executive\",\"have been pwned\",\"have I pwned\",\"haveibeenpwned\",\"HIPAA\",\"HITECH\",\"I been pwned\",\"I have been pwned\",\"K-12\",\"k12\",\"kent protect\",\"kentprotect\",\"pwned\",\"ransomware\",\"summary\",\"texas\",\"vicesociety\",\"Wisconsin\"],\"articleSection\":[\"The Breach Report!\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/kentprotect.com\\\/index.php\\\/2023\\\/04\\\/17\\\/breach-report-wisconsin-elmbrook-school-district-breach-by-vice-society-ransomware-group-affects-all-active-employees-and-unknown-total-amends-breach-update-from-7-months-ago\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/kentprotect.com\\\/index.php\\\/2023\\\/04\\\/17\\\/breach-report-wisconsin-elmbrook-school-district-breach-by-vice-society-ransomware-group-affects-all-active-employees-and-unknown-total-amends-breach-update-from-7-months-ago\\\/\",\"url\":\"https:\\\/\\\/kentprotect.com\\\/index.php\\\/2023\\\/04\\\/17\\\/breach-report-wisconsin-elmbrook-school-district-breach-by-vice-society-ransomware-group-affects-all-active-employees-and-unknown-total-amends-breach-update-from-7-months-ago\\\/\",\"name\":\"Breach Report: Wisconsin Elmbrook School District breach by Vice Society ransomware group affects \\\"all active employees\\\" and unknown total, breach updated\\\/amended from 7 months ago - Kent Protect\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/kentprotect.com\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/kentprotect.com\\\/index.php\\\/2023\\\/04\\\/17\\\/breach-report-wisconsin-elmbrook-school-district-breach-by-vice-society-ransomware-group-affects-all-active-employees-and-unknown-total-amends-breach-update-from-7-months-ago\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/kentprotect.com\\\/index.php\\\/2023\\\/04\\\/17\\\/breach-report-wisconsin-elmbrook-school-district-breach-by-vice-society-ransomware-group-affects-all-active-employees-and-unknown-total-amends-breach-update-from-7-months-ago\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/kentprotect.com\\\/wp-content\\\/uploads\\\/2023\\\/04\\\/ElmbrookSchoolslogo.jpg\",\"datePublished\":\"2023-04-17T15:50:57+00:00\",\"dateModified\":\"2023-04-17T16:34:31+00:00\",\"description\":\"Wisconsin Elmbrook School District breach by the Vice Society ransomware group took over 6 months to fully investigate and involved all employees with an unknown total.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/kentprotect.com\\\/index.php\\\/2023\\\/04\\\/17\\\/breach-report-wisconsin-elmbrook-school-district-breach-by-vice-society-ransomware-group-affects-all-active-employees-and-unknown-total-amends-breach-update-from-7-months-ago\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/kentprotect.com\\\/index.php\\\/2023\\\/04\\\/17\\\/breach-report-wisconsin-elmbrook-school-district-breach-by-vice-society-ransomware-group-affects-all-active-employees-and-unknown-total-amends-breach-update-from-7-months-ago\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/kentprotect.com\\\/index.php\\\/2023\\\/04\\\/17\\\/breach-report-wisconsin-elmbrook-school-district-breach-by-vice-society-ransomware-group-affects-all-active-employees-and-unknown-total-amends-breach-update-from-7-months-ago\\\/#primaryimage\",\"url\":\"https:\\\/\\\/kentprotect.com\\\/wp-content\\\/uploads\\\/2023\\\/04\\\/ElmbrookSchoolslogo.jpg\",\"contentUrl\":\"https:\\\/\\\/kentprotect.com\\\/wp-content\\\/uploads\\\/2023\\\/04\\\/ElmbrookSchoolslogo.jpg\",\"width\":700,\"height\":420,\"caption\":\"Elmbrook School District Logo\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/kentprotect.com\\\/index.php\\\/2023\\\/04\\\/17\\\/breach-report-wisconsin-elmbrook-school-district-breach-by-vice-society-ransomware-group-affects-all-active-employees-and-unknown-total-amends-breach-update-from-7-months-ago\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/kentprotect.com\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Breach Report: Wisconsin Elmbrook School District breach by Vice Society ransomware group affects &#8220;all active employees&#8221; and unknown total, breach updated\\\/amended from 7 months ago\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/kentprotect.com\\\/#website\",\"url\":\"https:\\\/\\\/kentprotect.com\\\/\",\"name\":\"Kent Protect\",\"description\":\"Starring the Breach Report! and other security and cybersecurity series\",\"publisher\":{\"@id\":\"https:\\\/\\\/kentprotect.com\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/kentprotect.com\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/kentprotect.com\\\/#organization\",\"name\":\"Kent Protect\",\"url\":\"https:\\\/\\\/kentprotect.com\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/kentprotect.com\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/kentprotect.com\\\/wp-content\\\/uploads\\\/2023\\\/04\\\/cropped-FullLogo_Transparent-1-with-KP-Smaller.png\",\"contentUrl\":\"https:\\\/\\\/kentprotect.com\\\/wp-content\\\/uploads\\\/2023\\\/04\\\/cropped-FullLogo_Transparent-1-with-KP-Smaller.png\",\"width\":209,\"height\":161,\"caption\":\"Kent Protect\"},\"image\":{\"@id\":\"https:\\\/\\\/kentprotect.com\\\/#\\\/schema\\\/logo\\\/image\\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/kentprotect.com\\\/#\\\/schema\\\/person\\\/f9b4d76bd2f5b5559a08ad2e004a1116\",\"name\":\"Kyler Kent CISSP\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/kentprotect.com\\\/wp-content\\\/uploads\\\/2023\\\/03\\\/Retry-3-150x150.jpg\",\"url\":\"https:\\\/\\\/kentprotect.com\\\/wp-content\\\/uploads\\\/2023\\\/03\\\/Retry-3-150x150.jpg\",\"contentUrl\":\"https:\\\/\\\/kentprotect.com\\\/wp-content\\\/uploads\\\/2023\\\/03\\\/Retry-3-150x150.jpg\",\"caption\":\"Kyler Kent CISSP\"},\"description\":\"Kyler Kent is a Senior Cybersecurity Analyst on CrowdStrike\u2019s Falcon Complete MDR team, where he helps large enterprises detect, investigate, and contain real intrusions across cloud and hybrid environments. His work spans threat hunting, incident response, and security automation\u2014turning noisy telemetry into clear, repeatable actions that reduce risk quickly. Previously, Kyler served as a Threat Hunting and Intelligence Specialist supporting a critical infrastructure provider in Dallas, and led security automation and operational coordination at CyberConvoy. He holds a Master\u2019s in Cybersecurity Risk Management from Georgetown University and maintains certifications including CISSP, AWS Solutions Architect \u2013 Professional, AWS Security \u2013 Specialty, and multiple CrowdStrike credentials. He writes to close the gap between \u201cwhat the textbook says\u201d and what analysts actually do on shift with his published book: \\\"SOC Analyst Career Guide\\\" (ISBN-13: 9781835467466). https:\\\/\\\/linktr.ee\\\/kentprotect.com Corrections: corrections@kentprotect.com\",\"sameAs\":[\"http:\\\/\\\/kylerkent.com\"],\"url\":\"https:\\\/\\\/kentprotect.com\\\/index.php\\\/author\\\/kylerkent\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Breach Report: Wisconsin Elmbrook School District breach by Vice Society ransomware group affects \"all active employees\" and unknown total, breach updated\/amended from 7 months ago - Kent Protect","description":"Wisconsin Elmbrook School District breach by the Vice Society ransomware group took over 6 months to fully investigate and involved all employees with an unknown total.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/kentprotect.com\/index.php\/2023\/04\/17\/breach-report-wisconsin-elmbrook-school-district-breach-by-vice-society-ransomware-group-affects-all-active-employees-and-unknown-total-amends-breach-update-from-7-months-ago\/","og_locale":"en_US","og_type":"article","og_title":"Breach Report: Wisconsin Elmbrook School District breach by Vice Society ransomware group affects \"all active employees\" and unknown total, breach updated\/amended from 7 months ago - Kent Protect","og_description":"Wisconsin Elmbrook School District breach by the Vice Society ransomware group took over 6 months to fully investigate and involved all employees with an unknown total.","og_url":"https:\/\/kentprotect.com\/index.php\/2023\/04\/17\/breach-report-wisconsin-elmbrook-school-district-breach-by-vice-society-ransomware-group-affects-all-active-employees-and-unknown-total-amends-breach-update-from-7-months-ago\/","og_site_name":"Kent Protect","article_published_time":"2023-04-17T15:50:57+00:00","article_modified_time":"2023-04-17T16:34:31+00:00","og_image":[{"width":700,"height":420,"url":"https:\/\/kentprotect.com\/wp-content\/uploads\/2023\/04\/ElmbrookSchoolslogo.jpg","type":"image\/jpeg"}],"author":"Kyler Kent CISSP","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Kyler Kent CISSP","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/kentprotect.com\/index.php\/2023\/04\/17\/breach-report-wisconsin-elmbrook-school-district-breach-by-vice-society-ransomware-group-affects-all-active-employees-and-unknown-total-amends-breach-update-from-7-months-ago\/#article","isPartOf":{"@id":"https:\/\/kentprotect.com\/index.php\/2023\/04\/17\/breach-report-wisconsin-elmbrook-school-district-breach-by-vice-society-ransomware-group-affects-all-active-employees-and-unknown-total-amends-breach-update-from-7-months-ago\/"},"author":{"name":"Kyler Kent CISSP","@id":"https:\/\/kentprotect.com\/#\/schema\/person\/f9b4d76bd2f5b5559a08ad2e004a1116"},"headline":"Breach Report: Wisconsin Elmbrook School District breach by Vice Society ransomware group affects &#8220;all active employees&#8221; and unknown total, breach updated\/amended from 7 months ago","datePublished":"2023-04-17T15:50:57+00:00","dateModified":"2023-04-17T16:34:31+00:00","mainEntityOfPage":{"@id":"https:\/\/kentprotect.com\/index.php\/2023\/04\/17\/breach-report-wisconsin-elmbrook-school-district-breach-by-vice-society-ransomware-group-affects-all-active-employees-and-unknown-total-amends-breach-update-from-7-months-ago\/"},"wordCount":506,"commentCount":0,"publisher":{"@id":"https:\/\/kentprotect.com\/#organization"},"image":{"@id":"https:\/\/kentprotect.com\/index.php\/2023\/04\/17\/breach-report-wisconsin-elmbrook-school-district-breach-by-vice-society-ransomware-group-affects-all-active-employees-and-unknown-total-amends-breach-update-from-7-months-ago\/#primaryimage"},"thumbnailUrl":"https:\/\/kentprotect.com\/wp-content\/uploads\/2023\/04\/ElmbrookSchoolslogo.jpg","keywords":["been pwned","breach","breach report","breaches","brookfield","ciso","cloud","computer security","computers","cyber security","cybercrime","cybersecurity","dallas","dark web","data breach","education","elmbrook","elmbrookschooldistrict","elmbrookschools","executive","have been pwned","have I pwned","haveibeenpwned","HIPAA","HITECH","I been pwned","I have been pwned","K-12","k12","kent protect","kentprotect","pwned","ransomware","summary","texas","vicesociety","Wisconsin"],"articleSection":["The Breach Report!"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/kentprotect.com\/index.php\/2023\/04\/17\/breach-report-wisconsin-elmbrook-school-district-breach-by-vice-society-ransomware-group-affects-all-active-employees-and-unknown-total-amends-breach-update-from-7-months-ago\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/kentprotect.com\/index.php\/2023\/04\/17\/breach-report-wisconsin-elmbrook-school-district-breach-by-vice-society-ransomware-group-affects-all-active-employees-and-unknown-total-amends-breach-update-from-7-months-ago\/","url":"https:\/\/kentprotect.com\/index.php\/2023\/04\/17\/breach-report-wisconsin-elmbrook-school-district-breach-by-vice-society-ransomware-group-affects-all-active-employees-and-unknown-total-amends-breach-update-from-7-months-ago\/","name":"Breach Report: Wisconsin Elmbrook School District breach by Vice Society ransomware group affects \"all active employees\" and unknown total, breach updated\/amended from 7 months ago - Kent Protect","isPartOf":{"@id":"https:\/\/kentprotect.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/kentprotect.com\/index.php\/2023\/04\/17\/breach-report-wisconsin-elmbrook-school-district-breach-by-vice-society-ransomware-group-affects-all-active-employees-and-unknown-total-amends-breach-update-from-7-months-ago\/#primaryimage"},"image":{"@id":"https:\/\/kentprotect.com\/index.php\/2023\/04\/17\/breach-report-wisconsin-elmbrook-school-district-breach-by-vice-society-ransomware-group-affects-all-active-employees-and-unknown-total-amends-breach-update-from-7-months-ago\/#primaryimage"},"thumbnailUrl":"https:\/\/kentprotect.com\/wp-content\/uploads\/2023\/04\/ElmbrookSchoolslogo.jpg","datePublished":"2023-04-17T15:50:57+00:00","dateModified":"2023-04-17T16:34:31+00:00","description":"Wisconsin Elmbrook School District breach by the Vice Society ransomware group took over 6 months to fully investigate and involved all employees with an unknown total.","breadcrumb":{"@id":"https:\/\/kentprotect.com\/index.php\/2023\/04\/17\/breach-report-wisconsin-elmbrook-school-district-breach-by-vice-society-ransomware-group-affects-all-active-employees-and-unknown-total-amends-breach-update-from-7-months-ago\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/kentprotect.com\/index.php\/2023\/04\/17\/breach-report-wisconsin-elmbrook-school-district-breach-by-vice-society-ransomware-group-affects-all-active-employees-and-unknown-total-amends-breach-update-from-7-months-ago\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/kentprotect.com\/index.php\/2023\/04\/17\/breach-report-wisconsin-elmbrook-school-district-breach-by-vice-society-ransomware-group-affects-all-active-employees-and-unknown-total-amends-breach-update-from-7-months-ago\/#primaryimage","url":"https:\/\/kentprotect.com\/wp-content\/uploads\/2023\/04\/ElmbrookSchoolslogo.jpg","contentUrl":"https:\/\/kentprotect.com\/wp-content\/uploads\/2023\/04\/ElmbrookSchoolslogo.jpg","width":700,"height":420,"caption":"Elmbrook School District Logo"},{"@type":"BreadcrumbList","@id":"https:\/\/kentprotect.com\/index.php\/2023\/04\/17\/breach-report-wisconsin-elmbrook-school-district-breach-by-vice-society-ransomware-group-affects-all-active-employees-and-unknown-total-amends-breach-update-from-7-months-ago\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/kentprotect.com\/"},{"@type":"ListItem","position":2,"name":"Breach Report: Wisconsin Elmbrook School District breach by Vice Society ransomware group affects &#8220;all active employees&#8221; and unknown total, breach updated\/amended from 7 months ago"}]},{"@type":"WebSite","@id":"https:\/\/kentprotect.com\/#website","url":"https:\/\/kentprotect.com\/","name":"Kent Protect","description":"Starring the Breach Report! and other security and cybersecurity series","publisher":{"@id":"https:\/\/kentprotect.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/kentprotect.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/kentprotect.com\/#organization","name":"Kent Protect","url":"https:\/\/kentprotect.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/kentprotect.com\/#\/schema\/logo\/image\/","url":"https:\/\/kentprotect.com\/wp-content\/uploads\/2023\/04\/cropped-FullLogo_Transparent-1-with-KP-Smaller.png","contentUrl":"https:\/\/kentprotect.com\/wp-content\/uploads\/2023\/04\/cropped-FullLogo_Transparent-1-with-KP-Smaller.png","width":209,"height":161,"caption":"Kent Protect"},"image":{"@id":"https:\/\/kentprotect.com\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/kentprotect.com\/#\/schema\/person\/f9b4d76bd2f5b5559a08ad2e004a1116","name":"Kyler Kent CISSP","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/kentprotect.com\/wp-content\/uploads\/2023\/03\/Retry-3-150x150.jpg","url":"https:\/\/kentprotect.com\/wp-content\/uploads\/2023\/03\/Retry-3-150x150.jpg","contentUrl":"https:\/\/kentprotect.com\/wp-content\/uploads\/2023\/03\/Retry-3-150x150.jpg","caption":"Kyler Kent CISSP"},"description":"Kyler Kent is a Senior Cybersecurity Analyst on CrowdStrike\u2019s Falcon Complete MDR team, where he helps large enterprises detect, investigate, and contain real intrusions across cloud and hybrid environments. His work spans threat hunting, incident response, and security automation\u2014turning noisy telemetry into clear, repeatable actions that reduce risk quickly. Previously, Kyler served as a Threat Hunting and Intelligence Specialist supporting a critical infrastructure provider in Dallas, and led security automation and operational coordination at CyberConvoy. He holds a Master\u2019s in Cybersecurity Risk Management from Georgetown University and maintains certifications including CISSP, AWS Solutions Architect \u2013 Professional, AWS Security \u2013 Specialty, and multiple CrowdStrike credentials. He writes to close the gap between \u201cwhat the textbook says\u201d and what analysts actually do on shift with his published book: \"SOC Analyst Career Guide\" (ISBN-13: 9781835467466). https:\/\/linktr.ee\/kentprotect.com Corrections: corrections@kentprotect.com","sameAs":["http:\/\/kylerkent.com"],"url":"https:\/\/kentprotect.com\/index.php\/author\/kylerkent\/"}]}},"_links":{"self":[{"href":"https:\/\/kentprotect.com\/index.php\/wp-json\/wp\/v2\/posts\/562","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/kentprotect.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/kentprotect.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/kentprotect.com\/index.php\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/kentprotect.com\/index.php\/wp-json\/wp\/v2\/comments?post=562"}],"version-history":[{"count":4,"href":"https:\/\/kentprotect.com\/index.php\/wp-json\/wp\/v2\/posts\/562\/revisions"}],"predecessor-version":[{"id":569,"href":"https:\/\/kentprotect.com\/index.php\/wp-json\/wp\/v2\/posts\/562\/revisions\/569"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/kentprotect.com\/index.php\/wp-json\/wp\/v2\/media\/563"}],"wp:attachment":[{"href":"https:\/\/kentprotect.com\/index.php\/wp-json\/wp\/v2\/media?parent=562"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/kentprotect.com\/index.php\/wp-json\/wp\/v2\/categories?post=562"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/kentprotect.com\/index.php\/wp-json\/wp\/v2\/tags?post=562"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}