The hackers extracted more than 4.8 million parents and 227k children's accounts from VTech's Learning Lodge website.
The data breach exposed extensive personal details including home addresses, security questions and answers and passwords stored as weak MD5 hashes.
Further children's details including names, ages, genders and associations with their parents' records were also exposed.
Source: https://www.troyhunt.com/when-children-are-breached-inside/
TPRM report: https://scoringcyber.rankiteo.com/company/vtech
"id": "vte105031222",
"linkid": "vtech",
"type": "Data Leak",
"date": "11/2015",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"
{'affected_entities': [{'customers_affected': ['4.8 million parents',
'227k children'],
'industry': 'Educational Toys',
'name': 'VTech',
'type': 'Company'}],
'data_breach': {'data_encryption': 'Weak MD5 hashes',
'data_exfiltration': 'Yes',
'number_of_records_exposed': ['4.8 million parents',
'227k children'],
'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['personal details',
'security questions and answers',
'passwords stored as weak MD5 '
'hashes',
"children's details"]},
'description': 'Hackers extracted more than 4.8 million parents and 227k '
"children's accounts from VTech's Learning Lodge website. The "
'data breach exposed extensive personal details including home '
'addresses, security questions and answers, and passwords '
"stored as weak MD5 hashes. Further children's details "
'including names, ages, genders, and associations with their '
"parents' records were also exposed.",
'impact': {'data_compromised': ['home addresses',
'security questions and answers',
'passwords stored as weak MD5 hashes',
"children's names",
"children's ages",
"children's genders",
"associations with parents' records"]},
'title': 'VTech Learning Lodge Data Breach',
'type': 'Data Breach'}