More than one million North American students have had their data exposed after a popular online learning platform OneClass, left it in a publicly accessible cloud database.
The trove contained over 27GB of data, amounting to 8.9 million records, including many students’ full names, email addresses, schools/universities, phone numbers, account details, and school enrollment details.
Source: https://www.infosecurity-magazine.com/news/online-learning-exposes-data-one/
TPRM report: https://scoringcyber.rankiteo.com/company/oneclass
"id": "one19396123",
"linkid": "oneclass",
"type": "Data Leak",
"date": "06/2020",
"severity": "85",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"{'affected_entities': [{'customers_affected': 'Over one million students',
'industry': 'Education',
'location': 'North America',
'name': 'OneClass',
'type': 'Online Learning Platform'}],
'attack_vector': 'Misconfigured Cloud Database',
'data_breach': {'number_of_records_exposed': '8.9 million',
'personally_identifiable_information': True,
'type_of_data_compromised': ['Full names',
'Email addresses',
'Schools/universities',
'Phone numbers',
'Account details',
'School enrollment details']},
'description': 'More than one million North American students have had their '
'data exposed after a popular online learning platform '
'OneClass left it in a publicly accessible cloud database. The '
'trove contained over 27GB of data, amounting to 8.9 million '
'records, including many students’ full names, email '
'addresses, schools/universities, phone numbers, account '
'details, and school enrollment details.',
'impact': {'data_compromised': ['Full names',
'Email addresses',
'Schools/universities',
'Phone numbers',
'Account details',
'School enrollment details']},
'title': 'OneClass Data Exposure',
'type': 'Data Exposure',
'vulnerability_exploited': 'Publicly Accessible Cloud Database'}