NYU is facing 10 class action lawsuits alleging that it mishandled applicants’ personal information and failed to meet national cybersecurity standards after a hacker leaked files with more than 3 million names, hometowns and GPAs on the university’s website last week. The lawsuits, each filed by an individual applicant, claim that NYU’s cybersecurity practices do not follow guidelines set by the National Institute of Standards and Technology and the Center for Internet Security, leaving those who applied to the school at risk of identity theft. Cybersecurity experts Zack Ganot and Arnaud de Saint Méloir, who help run databreach.com, told WSN that the amount of information included in the files — which were publicly downloadable on NYU’s main website for over two hours — could have sold for tens of thousands of dollars on the dark web. “Almost for sure, NYU will settle and people will receive compensation — it was a real breach,” Ganot told WSN. “Without putting it too bluntly, it was NYU’s fault. They did not secure the data as they should have, and it’s kind of hard to get around.” A university spokesperson did not respond to multiple requests for comment. Written by Dharma Niles and Krish Dev Visuals by Krish Dev and Kyra Reilley Click the link to read more. https://lnkd.in/gvrHGSe3
