Skip to content
OriginalSign in
Image: DataBreaches

DataBreachesDissent

GSG breach leaks 183k accounts after plaintext password flaw

Part of the FulcrumSec story · since 12 Jun

Quiet for 11 dayslast report 21 Oct17 articles5 outlets
12 Jun · DataBreaches first25 Aug19 SepNowThis article8th of 17
  • Fri 12 Jun, 14:20 UTC. DataBreaches, first report. FulcrumSec Breach Exposes 4.8TB of Data from Global Schools Group.
  • Tue 16 Jun, 01:30 UTC. DataBreaches. Novo Nordisk Faces Data Breach Exposing 11,500 Trial Records.
  • Tue 16 Jun, 12:47 UTC. SecurityWeek, its first report on the story. FulcrumSec Claims Novo Nordisk Hack, Steals 1.3TB of Trial Data.
  • Tue 16 Jun, 18:31 UTC. DataBreaches. One threat actor demanded $50 million from Novo Nordisk. Another one demanded $25 million. Neither got paid..
  • Wed 17 Jun, 10:09 UTC. Security Affairs, its first report on the story. EdTech firms hit by ShinyHunters and FulcrumSec cyberattacks.
  • Wed 17 Jun, 10:10 UTC. Security Affairs. FulcrumSec Targets Novo Nordisk, Leaks Clinical and Research Data.
  • Wed 17 Jun, 12:31 UTC. DataBreaches. Cybercriminals Are Targeting EdTech: Data Breaches and Ransomware Attacks on the Rise.
  • Thu 18 Jun, 17:20 UTC. DataBreaches. GSG breach leaks 183k accounts after plaintext password flaw. This article, 8th of 17.
  • Thu 18 Jun, 20:10 UTC. Dark Reading, its first report on the story. Novo Nordisk breach exposes 1.3TB after GitHub token leak.
  • Fri 19 Jun, 13:25 UTC. DataBreaches. Bombay Court Blocks Hacker Group From Leaking Kids' Data.
  • Sat 20 Jun, 13:31 UTC. DataBreaches. Injunctions Fail to Stop Global Schools Group Data Leak.
  • Thu 13 Aug, 01:00 UTC. DataBreaches. More Novo Nordisk data dumped by FulcrumSec.
  • Sun 30 Aug, 18:32 UTC. Security Affairs. FulcrumSec claims 86GB MAG breach exposes 8.7 million.
  • Mon 31 Aug, 10:50 UTC. SecurityWeek. FulcrumSec Claims 8.7M Data Theft from Manchester Airports.
  • Wed 2 Sep, 08:28 UTC. Infosecurity, its first report on the story. FulcrumSec Claims Responsibility for Manchester Airport Group Breach.
  • Fri 4 Sep, 19:46 UTC. Security Affairs. Manchester Airports Group Data Breach Exposes 8.8 Million Records.
  • Wed 21 Oct, 22:05 UTC. Dark Reading. TiDB Breach Exposes Customer Data Despite No Database Access.

The data breach involving the Global Schools Group (GSG) impacted multiple school brands, revealing a total of 183,164 affected user accounts, including 83,132 student accounts, 88,856 parent accounts, and 11,176 staff accounts. Significant amounts of sensitive data were exfiltrated, including student enrollment records, attendance data, and internal messages. The breach was attributed to poor security practices, with critical vulnerabilities such as plaintext password storage for over 12,000 accounts.

Parents and employees expressed concerns about the security of their personal information and the potential for sensitive communications to be exposed. Several school brands were identified, with varying locations across countries like India, Cambodia, the Philippines, the UK, and more.

How the story developed

All 17 articles
Quiet for 11 dayslast report 21 Oct17 articles5 outlets

17 articles from 5 outlets since 12 Jun. Quiet since 21 Oct. This was the 8th report, 6 days after the first.

Now12 Jun2112 Aug1924292621 OctFirst reportDataBreaches · 12 Jun, 14:20This article8th of 17 · day 6
  • Fri 12 Jun, 14:20 UTC. DataBreaches, first report. FulcrumSec Breach Exposes 4.8TB of Data from Global Schools Group.
  • Tue 16 Jun, 01:30 UTC. DataBreaches. Novo Nordisk Faces Data Breach Exposing 11,500 Trial Records.
  • Tue 16 Jun, 12:47 UTC. SecurityWeek, its first report on the story. FulcrumSec Claims Novo Nordisk Hack, Steals 1.3TB of Trial Data.
  • Tue 16 Jun, 18:31 UTC. DataBreaches. One threat actor demanded $50 million from Novo Nordisk. Another one demanded $25 million. Neither got paid..
  • Wed 17 Jun, 10:09 UTC. Security Affairs, its first report on the story. EdTech firms hit by ShinyHunters and FulcrumSec cyberattacks.
  • Wed 17 Jun, 10:10 UTC. Security Affairs. FulcrumSec Targets Novo Nordisk, Leaks Clinical and Research Data.
  • Wed 17 Jun, 12:31 UTC. DataBreaches. Cybercriminals Are Targeting EdTech: Data Breaches and Ransomware Attacks on the Rise.
  • Thu 18 Jun, 17:20 UTC. DataBreaches. GSG breach leaks 183k accounts after plaintext password flaw. This article, 8th of 17.
  • Thu 18 Jun, 20:10 UTC. Dark Reading, its first report on the story. Novo Nordisk breach exposes 1.3TB after GitHub token leak.
  • Fri 19 Jun, 13:25 UTC. DataBreaches. Bombay Court Blocks Hacker Group From Leaking Kids' Data.
  • Sat 20 Jun, 13:31 UTC. DataBreaches. Injunctions Fail to Stop Global Schools Group Data Leak.
  • Thu 13 Aug, 01:00 UTC. DataBreaches. More Novo Nordisk data dumped by FulcrumSec.
  • Sun 30 Aug, 18:32 UTC. Security Affairs. FulcrumSec claims 86GB MAG breach exposes 8.7 million.
  • Mon 31 Aug, 10:50 UTC. SecurityWeek. FulcrumSec Claims 8.7M Data Theft from Manchester Airports.
  • Wed 2 Sep, 08:28 UTC. Infosecurity, its first report on the story. FulcrumSec Claims Responsibility for Manchester Airport Group Breach.
  • Fri 4 Sep, 19:46 UTC. Security Affairs. Manchester Airports Group Data Breach Exposes 8.8 Million Records.
  • Wed 21 Oct, 22:05 UTC. Dark Reading. TiDB Breach Exposes Customer Data Despite No Database Access.
  • No CVE
  • Larger: an outlet’s first report
  • Coverage over time
  • Quiet time, folded
Show all 17 articles as a list
  1. Fri 12 JunDay 01
    1. FulcrumSec Breach Exposes 4.8TB of Data from Global Schools Group14:20 · DataBreaches · First report

  2. Quiet for 3 days

    Tue 16 JunDay 43
    1. Novo Nordisk Faces Data Breach Exposing 11,500 Trial Records01:30 · DataBreaches · Picked up again
    2. FulcrumSec Claims Novo Nordisk Hack, Steals 1.3TB of Trial Data12:47 · SecurityWeek
    3. One threat actor demanded $50 million from Novo Nordisk. Another one demanded $25 million. Neither got paid.18:31 · DataBreaches
  3. Wed 17 JunDay 53
    1. EdTech firms hit by ShinyHunters and FulcrumSec cyberattacks10:09 · Security Affairs
    2. FulcrumSec Targets Novo Nordisk, Leaks Clinical and Research Data10:10 · Security Affairs
    3. Cybercriminals Are Targeting EdTech: Data Breaches and Ransomware Attacks on the Rise12:31 · DataBreaches
  4. Thu 18 JunDay 62
    1. GSG breach leaks 183k accounts after plaintext password flaw17:20 · DataBreaches · This article, 8th of 17
    2. Novo Nordisk breach exposes 1.3TB after GitHub token leak20:10 · Dark Reading
  5. Fri 19 JunDay 71
    1. Bombay Court Blocks Hacker Group From Leaking Kids' Data13:25 · DataBreaches
  6. Sat 20 JunDay 81
    1. Injunctions Fail to Stop Global Schools Group Data Leak13:31 · DataBreaches

  7. Quiet for 8 weeks

    Thu 13 AugDay 621
    1. More Novo Nordisk data dumped by FulcrumSec01:00 · DataBreaches · Picked up again

  8. Quiet for 3 weeks

    Sun 30 AugDay 791
    1. FulcrumSec claims 86GB MAG breach exposes 8.7 million18:32 · Security Affairs · Picked up again
  9. Mon 31 AugDay 801
    1. FulcrumSec Claims 8.7M Data Theft from Manchester Airports10:50 · SecurityWeek

  10. Quiet for 2 days

    Wed 2 SepDay 821
    1. FulcrumSec Claims Responsibility for Manchester Airport Group Breach08:28 · Infosecurity

  11. Quiet for 2 days

    Fri 4 SepDay 841
    1. Manchester Airports Group Data Breach Exposes 8.8 Million Records19:46 · Security Affairs · Picked up again

  12. Quiet for 7 weeks

    Wed 21 OctDay 1311
    1. TiDB Breach Exposes Customer Data Despite No Database Access22:05 · Dark Reading · Picked up again

Sources

CyberSIXTSignal over noise
Updated AboutDevelopersSign in