SANS Institute employee was tricked by a phishing attack in late July, which gave hackers partial access to employee’s Office 365 account. SANS found 500 emails from employee’s account were forwarded, including emails that exposed the data of 28,000 customers. The personal information in those emails contained details such as names, work titles, company names, industry, addresses and country of residence. Institute is planning to create a webinar and training material on lessons learned in this incident, says James Lyne, CTO.”]
Source: https://www.govinfosecurity.com/sans-institute-sees-its-breach-as-teachable-moment-a-14818