Monday, November 4, 2024
HomeData Breach1M e-learning Student Records Exposed Online From Misconfigured Cloud Storage

1M e-learning Student Records Exposed Online From Misconfigured Cloud Storage

Published on

Malware protection

More than 1 million e-learning users data exposed from a misconfigured and unencrypted Amazon S3 buckets and other types of servers. The exposed data can be accessed by anyone online without any form of authentication.

e-learning Students Data Leak

The breach was found by researchers at Wizcase, the breach affects 5 different eLearning Companies around the globe. The data found to be stored 4 Amazon S3 buckets and an ElasticSearch server, due to misconfigurations the data are available publically.

Following are the data exposed;

- Advertisement - SIEM as a Service
  • Full names
  • Email addresses
  • ID numbers
  • Phone numbers
  • Home addresses
  • Date of birth
  • Specific course and school information

What are the Companies Affected

Escola Digital – Brazilian eLearning website exposes several CSV files with user’s personally identifiable information. The data found to be collected between 2016 and 2017.

MyTopDog – Platform specifically for school children based in SoutAfrica, exposes over 800,000 students data and other business information.

Okoo – Online Learning Platform for Children, the platform exposes almost 1 million entries of users’ activity.

Square Panda – Virtual platform launched to help children learn how to read and write through various online games. The platform exposes over 15,000 user records.

Playground Sessions – It offers virtual piano lessons, around 4,100 users records exposed from the open Amazon bucket.

Seems many of the users affected in the breach are children and young people, attackers may launch Phishing and scam attack using the personal information.

You can follow us on Linkedin, Twitter, Facebook for daily Cybersecurity and hacking news updates.

Also Read

Cognizant Confirms Data Breach After Ransomware Attack

ZEE5 Hacked – Hackers Stolen Over 150GB of Live Data from Video on Demand Platform

Gurubaran
Gurubaran
Gurubaran is a co-founder of Cyber Security News and GBHackers On Security. He has 10+ years of experience as a Security Consultant, Editor, and Analyst in cybersecurity, technology, and communications.

Latest articles

Evasive Panda Attacking Cloud Services To Steal Data Using New Toolkit

The Evasive Panda group deployed a new C# framework named CloudScout to target a...

Massive Midnight Blizzard Phishing Attack Using Weaponized RDP Files

Researchers warn of ongoing spear-phishing attacks by Russian threat actor Midnight Blizzard targeting individuals...

Sophisticated Phishing Attack Targeting Ukraine Military Sectors

The Ukrainian Cyber Emergency Response Team discovered a targeted phishing campaign launched by UAC-0215...

Chinese Hackers Attacking Microsoft Customers With Sophisticated Password Spray Attacks

Researchers have identified a network of compromised devices, CovertNetwork-1658, used by Chinese threat actors...

Free Webinar

Protect Websites & APIs from Malware Attack

Malware targeting customer-facing websites and API applications poses significant risks, including compliance violations, defacements, and even blacklisting.

Join us for an insightful webinar featuring Vivek Gopalan, VP of Products at Indusface, as he shares effective strategies for safeguarding websites and APIs against malware.

Discussion points

Scan DOM, internal links, and JavaScript libraries for hidden malware.
Detect website defacements in real time.
Protect your brand by monitoring for potential blacklisting.
Prevent malware from infiltrating your server and cloud infrastructure.

More like this

Evasive Panda Attacking Cloud Services To Steal Data Using New Toolkit

The Evasive Panda group deployed a new C# framework named CloudScout to target a...

Grayscale Investments Data Breach Exposes 693K User Records Reportedly Affected

Grayscale Investments, a prominent crypto asset manager, has reportedly suffered a data breach affecting...

Northern Ireland Police to Pay £750,000 Fine Following Data Breach

The Police Service of Northern Ireland (PSNI) has been ordered to pay a £750,000...