Skip to content
OriginalSign in

DataBreachesDissent

Cybercriminals Are Targeting EdTech: Data Breaches and Ransomware Attacks on the Rise

Part of the FulcrumSec story · since 12 Jun

Quiet for 9 dayslast report 21 Oct17 articles5 outlets
12 Jun · DataBreaches first22 Aug15 Sep9 OctNowThis article7th of 17
  • Fri 12 Jun, 14:20 UTC. DataBreaches, first report. FulcrumSec Breach Exposes 4.8TB of Data from Global Schools Group.
  • Tue 16 Jun, 01:30 UTC. DataBreaches. Novo Nordisk Faces Data Breach Exposing 11,500 Trial Records.
  • Tue 16 Jun, 12:47 UTC. SecurityWeek, its first report on the story. FulcrumSec Claims Novo Nordisk Hack, Steals 1.3TB of Trial Data.
  • Tue 16 Jun, 18:31 UTC. DataBreaches. One threat actor demanded $50 million from Novo Nordisk. Another one demanded $25 million. Neither got paid..
  • Wed 17 Jun, 10:09 UTC. Security Affairs, its first report on the story. EdTech firms hit by ShinyHunters and FulcrumSec cyberattacks.
  • Wed 17 Jun, 10:10 UTC. Security Affairs. FulcrumSec Targets Novo Nordisk, Leaks Clinical and Research Data.
  • Wed 17 Jun, 12:31 UTC. DataBreaches. Cybercriminals Are Targeting EdTech: Data Breaches and Ransomware Attacks on the Rise. This article, 7th of 17.
  • Thu 18 Jun, 17:20 UTC. DataBreaches. GSG breach leaks 183k accounts after plaintext password flaw.
  • Thu 18 Jun, 20:10 UTC. Dark Reading, its first report on the story. Novo Nordisk breach exposes 1.3TB after GitHub token leak.
  • Fri 19 Jun, 13:25 UTC. DataBreaches. Bombay Court Blocks Hacker Group From Leaking Kids' Data.
  • Sat 20 Jun, 13:31 UTC. DataBreaches. Injunctions Fail to Stop Global Schools Group Data Leak.
  • Thu 13 Aug, 01:00 UTC. DataBreaches. More Novo Nordisk data dumped by FulcrumSec.
  • Sun 30 Aug, 18:32 UTC. Security Affairs. FulcrumSec claims 86GB MAG breach exposes 8.7 million.
  • Mon 31 Aug, 10:50 UTC. SecurityWeek. FulcrumSec Claims 8.7M Data Theft from Manchester Airports.
  • Wed 2 Sep, 08:28 UTC. Infosecurity, its first report on the story. FulcrumSec Claims Responsibility for Manchester Airport Group Breach.
  • Fri 4 Sep, 19:46 UTC. Security Affairs. Manchester Airports Group Data Breach Exposes 8.8 Million Records.
  • Wed 21 Oct, 22:05 UTC. Dark Reading. TiDB Breach Exposes Customer Data Despite No Database Access.

The Education Technology (EdTech) sector is increasingly targeted by cybercriminals due to sensitive data like student and employee information being stored on these platforms. Notable attack groups include ShinyHunters and FulcrumSec, each employing different methods of exploitation.

ShinyHunters is known for large-scale data breaches using API exploitation and database misconfigurations, while FulcrumSec specializes in ransomware attacks with double extortion tactics, employing custom encryption and leak sites to pressure victims. Both groups have credible histories of incidents, posing significant threats to educational organizations.

How the story developed

All 17 articles
Quiet for 9 dayslast report 21 Oct17 articles5 outlets

17 articles from 5 outlets since 12 Jun. Quiet since 21 Oct. This was the 7th report, 5 days after the first.

Now12 Jun2112 Aug1924292621 OctFirst reportDataBreaches · 12 Jun, 14:20This article7th of 17 · day 5
  • Fri 12 Jun, 14:20 UTC. DataBreaches, first report. FulcrumSec Breach Exposes 4.8TB of Data from Global Schools Group.
  • Tue 16 Jun, 01:30 UTC. DataBreaches. Novo Nordisk Faces Data Breach Exposing 11,500 Trial Records.
  • Tue 16 Jun, 12:47 UTC. SecurityWeek, its first report on the story. FulcrumSec Claims Novo Nordisk Hack, Steals 1.3TB of Trial Data.
  • Tue 16 Jun, 18:31 UTC. DataBreaches. One threat actor demanded $50 million from Novo Nordisk. Another one demanded $25 million. Neither got paid..
  • Wed 17 Jun, 10:09 UTC. Security Affairs, its first report on the story. EdTech firms hit by ShinyHunters and FulcrumSec cyberattacks.
  • Wed 17 Jun, 10:10 UTC. Security Affairs. FulcrumSec Targets Novo Nordisk, Leaks Clinical and Research Data.
  • Wed 17 Jun, 12:31 UTC. DataBreaches. Cybercriminals Are Targeting EdTech: Data Breaches and Ransomware Attacks on the Rise. This article, 7th of 17.
  • Thu 18 Jun, 17:20 UTC. DataBreaches. GSG breach leaks 183k accounts after plaintext password flaw.
  • Thu 18 Jun, 20:10 UTC. Dark Reading, its first report on the story. Novo Nordisk breach exposes 1.3TB after GitHub token leak.
  • Fri 19 Jun, 13:25 UTC. DataBreaches. Bombay Court Blocks Hacker Group From Leaking Kids' Data.
  • Sat 20 Jun, 13:31 UTC. DataBreaches. Injunctions Fail to Stop Global Schools Group Data Leak.
  • Thu 13 Aug, 01:00 UTC. DataBreaches. More Novo Nordisk data dumped by FulcrumSec.
  • Sun 30 Aug, 18:32 UTC. Security Affairs. FulcrumSec claims 86GB MAG breach exposes 8.7 million.
  • Mon 31 Aug, 10:50 UTC. SecurityWeek. FulcrumSec Claims 8.7M Data Theft from Manchester Airports.
  • Wed 2 Sep, 08:28 UTC. Infosecurity, its first report on the story. FulcrumSec Claims Responsibility for Manchester Airport Group Breach.
  • Fri 4 Sep, 19:46 UTC. Security Affairs. Manchester Airports Group Data Breach Exposes 8.8 Million Records.
  • Wed 21 Oct, 22:05 UTC. Dark Reading. TiDB Breach Exposes Customer Data Despite No Database Access.
  • No CVE
  • Larger: an outlet’s first report
  • Coverage over time
  • Quiet time, folded
Show all 17 articles as a list
  1. Fri 12 JunDay 01
    1. FulcrumSec Breach Exposes 4.8TB of Data from Global Schools Group14:20 · DataBreaches · First report

  2. Quiet for 3 days

    Tue 16 JunDay 43
    1. Novo Nordisk Faces Data Breach Exposing 11,500 Trial Records01:30 · DataBreaches · Picked up again
    2. FulcrumSec Claims Novo Nordisk Hack, Steals 1.3TB of Trial Data12:47 · SecurityWeek
    3. One threat actor demanded $50 million from Novo Nordisk. Another one demanded $25 million. Neither got paid.18:31 · DataBreaches
  3. Wed 17 JunDay 53
    1. EdTech firms hit by ShinyHunters and FulcrumSec cyberattacks10:09 · Security Affairs
    2. FulcrumSec Targets Novo Nordisk, Leaks Clinical and Research Data10:10 · Security Affairs
    3. Cybercriminals Are Targeting EdTech: Data Breaches and Ransomware Attacks on the Rise12:31 · DataBreaches · This article, 7th of 17
  4. Thu 18 JunDay 62
    1. GSG breach leaks 183k accounts after plaintext password flaw17:20 · DataBreaches
    2. Novo Nordisk breach exposes 1.3TB after GitHub token leak20:10 · Dark Reading
  5. Fri 19 JunDay 71
    1. Bombay Court Blocks Hacker Group From Leaking Kids' Data13:25 · DataBreaches
  6. Sat 20 JunDay 81
    1. Injunctions Fail to Stop Global Schools Group Data Leak13:31 · DataBreaches

  7. Quiet for 8 weeks

    Thu 13 AugDay 621
    1. More Novo Nordisk data dumped by FulcrumSec01:00 · DataBreaches · Picked up again

  8. Quiet for 3 weeks

    Sun 30 AugDay 791
    1. FulcrumSec claims 86GB MAG breach exposes 8.7 million18:32 · Security Affairs · Picked up again
  9. Mon 31 AugDay 801
    1. FulcrumSec Claims 8.7M Data Theft from Manchester Airports10:50 · SecurityWeek

  10. Quiet for 2 days

    Wed 2 SepDay 821
    1. FulcrumSec Claims Responsibility for Manchester Airport Group Breach08:28 · Infosecurity

  11. Quiet for 2 days

    Fri 4 SepDay 841
    1. Manchester Airports Group Data Breach Exposes 8.8 Million Records19:46 · Security Affairs · Picked up again

  12. Quiet for 7 weeks

    Wed 21 OctDay 1311
    1. TiDB Breach Exposes Customer Data Despite No Database Access22:05 · Dark Reading · Picked up again

Sources

CyberSIXTSignal over noise
Updated AboutDevelopersSign in