Nearly $1 million was stolen from CHET — Connecticut Higher Education Trust — accounts during a security breach and 21 account holders were affected, according to the Office of the State Treasurer. Connecticut State Treasurer Denise Nappier said that TIAA-CREF Tuition Financing, Inc., the CHET Direct program manager, alerted the state Treasury about the breach and will restore the affected accounts. Nappier said unauthorized individuals gained online access to 21 CHET account holders and made 44 withdrawals, amounting to a total of $1,416,635, of that, $442,540 was recovered or stopped.
Andy Norton, Director of Threat Intelligence at Lastline:
Some 529 plans have made 2 factor authentication mandatory, and this would seem like a good measure to raise the bar in preventing these type of attacks being successful.”
The opinions expressed in this post belongs to the individual contributors and do not necessarily reflect the views of Information Security Buzz.