IBM: Command injection is the top attack vector targeting 42 percent of X-Force-monitored clients. The education sector should take steps to thwart command injection attacks, authors say. Data that could be obtained from these breaches include names, addresses, login information such as passwords and usernames, email addresses, Social Security numbers and even medical and financial information. The average cost for each lost or stolen record containing sensitive information in the education sector is $200, substantially higher than the overall mean of $141.”]