SANS Institute

Summary

On August 6, 2020, the SANS Institute – an organization that offers information security training, certification, and research –  discovered a suspicious forwarding rule during a review of email configuration and rules. SANS identified a single phishing email impacting a single employee's email account. The forwarded emails, sent to an unknown external email address, exposed approximately 28,000 records of personally identifiable information (PII), including email, first name, last name, work title, company name, industry, address, and country of residence. The exposed information does not include passwords or financial information such as credit card numbers. The forwarding rule and malicious Microsoft Office 365 add-in were removed and affected individuals will be notified by email.