American Councils for International Education

American Councils for International Education reported a data breach to the Indiana Attorney General. The breach occurred on 2021-04-21 and was reported on 2021-06-01. 105 Indiana residents were affected. 4,896 individuals affected in total.

American Councils for International Education reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2021-06-01. 133 Massachusetts residents were affected. The report records the breach type as electronic.

American Councils for International Education notified individuals of a data exposure occurring April 21-28, 2021. Program finalists were inadvertently granted administrator-level access to a database containing applicant records, including education, medical, and government ID data. 375 finalists accessed the database. American Councils terminated access, conducted an investigation, and revised user access controls.

American Councils for International Education notified the NH AG that between April 21-28, 2021, finalists in a language study program were inadvertently granted administrator-level view access to a database containing records for applicants and participants. This misconfiguration exposed PII including SSNs, bank account numbers, and medical/education records. 550 individuals were affected (24 in NH). Access was terminated immediately upon discovery on April 28, 2021. Remediation included profile revisions and staff training. Credit monitoring was offered to those with sensitive financial/identity data.

American Councils for International Education disclosed that program finalists were inadvertently granted administrator-level view access to a database containing applicant records between April 21-28, 2021. The exposure affected 550 individuals, including 119 in Washington. Data accessed included education records, medical records, government IDs, and bank account numbers. American Councils terminated access, conducted an investigation, revised user profiles, and offered credit monitoring.

American Councils for International Education notified students that Al-Farabi Kazakh National University (KazNU) improperly shared student names, DOBs, and passport numbers with other students on the same study-abroad program between 2015 and Jan 2019. The incident was discovered recently; the involved KazNU employee was terminated. American Councils updated privacy practices and recommended fraud alerts.

American Councils for International Education notified students that Al-Farabi Kazakh National University (KazNU) improperly shared student PII (names, DOB, passport data) with other students in the same study-abroad program between 2015 and Jan 2019. The incident was discovered in Jan 2019. The involved KazNU employee was terminated. American Councils updated privacy practices.