{
  "action": {
    "error": {
      "notes": "Inadequate sanitization of FOIA released information",
      "variety": [
        "Misdelivery"
      ],
      "vector": [
        "Inadequate processes"
      ]
    }
  },
  "actor": {
    "internal": {
      "job_change": [
        "Let go"
      ],
      "motive": [
        "NA"
      ],
      "variety": [
        "Manager"
      ]
    }
  },
  "asset": {
    "assets": [
      {
        "amount": 1,
        "variety": "S - Web application"
      }
    ],
    "cloud": [
      "Other"
    ],
    "country": [
      "US"
    ],
    "total_amount": 1
  },
  "attribute": {
    "confidentiality": {
      "data": [
        {
          "variety": "Personal"
        },
        {
          "variety": "Internal"
        }
      ],
      "data_disclosure": "Yes",
      "data_victim": [
        "Employee",
        "Student"
      ],
      "state": [
        "Stored unencrypted"
      ]
    }
  },
  "confidence": "High",
  "discovery_method": {
    "external": {
      "variety": [
        "Customer"
      ]
    }
  },
  "impact": {
    "overall_rating": "Insignificant"
  },
  "incident_id": "019a5060-ef60-11e9-8b51-736a93581b2e",
  "plus": {
    "analysis_status": "Validated",
    "analyst": "gbassett",
    "asset_os": [
      "Unknown"
    ],
    "attribute": {
      "confidentiality": {
        "data_abuse": "No"
      }
    },
    "created": "2019-10-15T20:37:42.582Z",
    "dbir_year": 2020,
    "event_chain": [
      {
        "action": "err",
        "actor": "int",
        "asset": "srv",
        "attribute": "cp"
      }
    ],
    "github": "12798",
    "master_id": "a2724294-4845-48f4-abc1-353c7112d575",
    "modified": "2019-10-15T20:37:42.582Z"
  },
  "reference": "https://news.wttw.com/2018/12/28/cps-ousted-ogden-principal-exposed-private-student-info-new-data-breach",
  "schema_version": "1.3.4",
  "security_incident": "Confirmed",
  "source_id": "vcdb",
  "summary": "A principal sent a google drive link to a drive containing sensitive information by email.  The principal was then FOIA'd and sent the email as part of the response, including the link with all the sensitive information.",
  "targeted": "NA",
  "timeline": {
    "compromise": {
      "unit": "Months"
    },
    "containment": {
      "unit": "Unknown"
    },
    "discovery": {
      "unit": "Weeks"
    },
    "exfiltration": {
      "unit": "Minutes"
    },
    "incident": {
      "year": 2018
    }
  },
  "victim": {
    "country": [
      "US"
    ],
    "employee_count": "50001 to 100000",
    "industry": "611110",
    "locations_affected": 1,
    "region": [
      "019021"
    ],
    "state": "US-IL",
    "victim_id": "Chicago Public School System"
  }
}