E-Learning Sites with Unsecured Cloud Servers Lead to Students Records Being Exposed

Threat Watch

Threat Watch E-Learning Sites with Unsecured Cloud Servers Lead to Students Records Being Exposed

E-Learning Sites with Unsecured Cloud Servers Lead to Students Records Being Exposed

Five different e-learning platforms are the latest to feel the effects of cloud misconfigurations. These consisted of four unencrypted and misconfigured AWS S3 buckets and one unsecured Elasticsearch server. The five affected sites and a rough amount of the records exposed include

Escola Digital- 75,000
MyTopDog- 800,000
Okoo- 7,200
Square Panda- 15,000
Playground Sessions- 4,100

This amount combines to make the total more than roughly 900,000 records. WizCase, who is responsible for discovering the records, stated, “As many users whose data was leaked aren’t active on the sites anymore, they’re less likely to realize these companies still have their information. However, it’s still possible that their data can be used to aid in various types of online crimes. These dangers are even bigger since many of the users affected by the leaks are children and young people.”

ANALYST NOTES

Users who may have been affected by this situation should verify the legitimacy of suspicious emails. Scams may also be carried out over the phone, so when answering a call from an unknown number, it is best not to discuss any PII. Some users may not suspicious activity on their accounts; this should be reported to the respective outlets as soon as possible.

Source: https://www.infosecurity-magazine.com/news/one-million-online-student-records/?&web_view=true

The war in Ukraine and its impact on how China views Taiwan

Digging through Rust to find Gold: Extracting Secrets from Rust Malware

5 Critical Criteria for evaluating Managed Detection & Response (MDR)

How Ransomware Capabilities Are Evolving and What You Can Do to Keep Your Organization Secure

Threat Watch