Data Breaches in Education Sector Are Costly, Study Finds

Associate Editor

Data breaches are costing companies in education up to $300 per compromised record, making it the second most impacted sector—behind only healthcare—for businesses with lost or stolen records globally, according to research released Wednesday by the Ponemon Institute. 

Four education companies were included in the study of 350 businesses in 11 countries that experienced data breaches in 2014. For all companies, a 23 percent increase in the total cost of a data breach was reported, compared to 2013.

In the U.S., the cost of handling a data breach is up to $225 per compromised record, the organization found, although only one company provided information about its response to a data breach. Researchers protected the identities of the businesses responding to its study.

Education companies pay considerably more for each lost or stolen record than the average of companies in all industries reporting breaches, which is $154 globally and $217 in the U.S. On the other hand, education companies are less likely to lose customers as a result. They are among the lowest-ranked industries for “churn,” which is described as the loss of existing customers.

The bar graph below illustrates where education companies fit into the global picture for cost of breaches.


The many forms that education data take—and the sensitivity of that data—are primary reasons costs are so high, said Larry Ponemon, founder and chairman of the Traverse City, Mich. research business, in a phone interview. Students’ personally identifiable information, students’ diagnoses, assessment results, and parents’ financial information are among the confidential data that could be compromised, he said.

While saying that companies’ identities are kept anonymous, Ponemon pointed to Pearson, the London- and New York-based global education company, when giving an example of the kind of exposure companies in the education sector can face. He noted that Pearson’s reach extends to collecting data for assessments and through online educational resources, at various educational levels and in multiple countries.

Causes of Data Breaches

For all industries, most data breaches—both globally and in the U.S.—are caused by hackers’ or criminal insiders’ malicious attacks, the study found. (See chart below.)

Causes of data breach.JPGIn the U.S., malicious or criminal attacks account for 49 percent of all breaches. System glitches are the cause of 32 percent of breaches, and human error accounts for 19 percent.

Ponemon found that an increase in the frequency of cyber attacks—and in the costs to remediate—is one of the main reasons for the climbing costs of dealing with data breaches.

How Costs are Calculated

Researchers said companies identified the following costs incurred when a data breach is first discovered:

  • Conducting investigations and forensics to determine the root cause of the breach
  • Identifying the probable victims
  • Deploying a team to respond to the breach
  • Communicating with those affected, and handling public relations

After the breach, companies typically paid for:

  • Audit and consulting services
  • Legal services for defense
  • Free or discounted services to the victims of the breach
  • Losing customers
  • Acquiring new customers, and providing loyalty programs for existing ones.

The “2015 Cost of Data Breach Study: United States” study is available here, and the global study can be accessed here.

Charts: From 2015 Cost of Data Breach Study: Global Analysis”

Related Stories:

35 thoughts on “Data Breaches in Education Sector Are Costly, Study Finds

  1. No matter the data breach is in the education sector or any other; it always lays large scale implications on the organization as well as all the people who are associated, and lastly, the image is spoiled because everyone claims to have taken all the security measures into consideration.

  2. Data breaches in the education sector is a sensitive matter according to studies. The best way to tackle such incidents in future is to provide the best security measures for such organisations just to secure privacy for the organisations and to the persons associated with them.

  3. Data breaches in the education sector is a sensitive matter. The best way to tackle such incidents in future is to provide the best security measures for such organisations just to secure privacy for the organisations and to the persons associated with them.

  4. “Data Breaches” have become a major problem of the modern digital world; it is not compulsory that these data breaches are only costly for the education sector, but all the other sectors are affected from them and it is just that only the “Degree” of attack varies upon the quality of data which has been hacked or affected.

  5. Well; data breaches have increased so much in the present scenario, it is true that data breaches in the education sector are costly because all kind of information of the students and their parents are exposed out, though a data breach is costlier everywhere whether it is in any other industry or on a personal computer.

  6. Well; the statistics here really clear the picture why these data breaches are proving to be costlier in the education sector, yet they are a really dangerous threat of the digital world as data for any individual or organization is an important resource and a breach on it costs a lot if its worth it.

  7. Antivirus instantly cubes all of sites which may have malware in it. Just as So that you obtain yourself a correct scanning of this gadget Updated regularly. Links offered inside the mailbox.

  8. Redeem your McAfee Key by following few simple steps, simply Login and download, install and activate the McAfee antivirus on your device. Log in to the official McAfee activation website

  9. McAfee is the comprehensive security software which protects your devices from the virus, malware, cyber attacks, and online threats. To download, install, and activate McAfee on your device go through the

  10. Webroot is one of the best antivirus software which protect your system from phishing, malware and viruses without affecting your data. It secure and safe your data while cleaning up threats. You can click on follow links to get know more about this antivirus.

  11. Geek Squad Tech Support is installation, setup, protection, and support. we always give the installation so our experts are there to help you in any manner and at any time.

  12. Loaded with all these astounding highlights and functionalities, would prefer you not to download and introduce this Aol Desktop Gold Download application. Basically pursue the underneath referenced strides to realize how to download and introduce or uninstall this product. Before that you should verify that your PC meets the framework necessities or not.

  13. The best part of the Hulu channel is there are some Groundbreaking series which can make up your leisure time. Watch hundreds of shows anywhere and at anytime, contact the Roku technical support to report your issues and an expert panel is always there to help you.

  14. Thank you for this very useful information sharing with us. I feel grateful about it and really enjoyed learning this blog more about this topic. | | | |

  15. Thank you for this very useful information sharing with us. I feel grateful for it and really enjoyed learning this blog more about this topic. | | | |

  16. Sanchi stupa is available in Bhopal in the capital of Madhya Pradesh. The here available domed-shaped structure over the precious relics of Buddha and serves as a marker for a sacred space. This is the oldest stone structure in India with a group of Buddhist monuments because it is a part of UNESCO World Heritage, this is the oldest and fantasy gateway of India.

Leave a Reply

Your email address will not be published. Required fields are marked *