7 million student records leaked from K12.com, which connects students to online schools

Jul 31, 2019 by

About 800 California students were impacted, according to the company

An online portal that connects families to online schools across the nation left student records unsecured, leading to almost 7 million of student records potentially being stolen, according to British online security firm Comparitech.

“Someone stored the database in an unsecured MongoDB cloud instance without any authentication required to access it,” Paul Bischoff, the editor of Comparitech’s blog, wrote in an email, “… someone working on behalf of K12 put the database online and forgot to set a password.”

The problem was discovered June 25 by a Comparitech security researcher, who found the exposed data using specialized search engines. The leak appeared to have happened on June 23 and was fixed July 1. Comparitech publicly announced the leak on July 10.

“The database contained the names, ages, and genders of students along with their respective schools — information that many parents would not be comfortable sharing publicly,” Bischoff wrote. Students’ names, states, age, birth dates, school district, genders, grades and school names were all included in the database.

continue: 7 million student records leaked from K12.com, which connects students to online schools – Daily News

Print Friendly, PDF & Email

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.