Skip to content
OriginalSign in
Image: Security Affairs

Security AffairsPierluigi Paganini

EdTech firms hit by ShinyHunters and FulcrumSec cyberattacks

Part of the FulcrumSec story · since 12 Jun

Quiet for 9 dayslast report 21 Oct17 articles5 outlets
12 Jun · DataBreaches first22 Aug15 Sep9 OctNowThis article5th of 17
  • Fri 12 Jun, 14:20 UTC. DataBreaches, first report. FulcrumSec Breach Exposes 4.8TB of Data from Global Schools Group.
  • Tue 16 Jun, 01:30 UTC. DataBreaches. Novo Nordisk Faces Data Breach Exposing 11,500 Trial Records.
  • Tue 16 Jun, 12:47 UTC. SecurityWeek, its first report on the story. FulcrumSec Claims Novo Nordisk Hack, Steals 1.3TB of Trial Data.
  • Tue 16 Jun, 18:31 UTC. DataBreaches. One threat actor demanded $50 million from Novo Nordisk. Another one demanded $25 million. Neither got paid..
  • Wed 17 Jun, 10:09 UTC. Security Affairs, its first report on the story. EdTech firms hit by ShinyHunters and FulcrumSec cyberattacks. This article, 5th of 17.
  • Wed 17 Jun, 10:10 UTC. Security Affairs. FulcrumSec Targets Novo Nordisk, Leaks Clinical and Research Data.
  • Wed 17 Jun, 12:31 UTC. DataBreaches. Cybercriminals Are Targeting EdTech: Data Breaches and Ransomware Attacks on the Rise.
  • Thu 18 Jun, 17:20 UTC. DataBreaches. GSG breach leaks 183k accounts after plaintext password flaw.
  • Thu 18 Jun, 20:10 UTC. Dark Reading, its first report on the story. Novo Nordisk breach exposes 1.3TB after GitHub token leak.
  • Fri 19 Jun, 13:25 UTC. DataBreaches. Bombay Court Blocks Hacker Group From Leaking Kids' Data.
  • Sat 20 Jun, 13:31 UTC. DataBreaches. Injunctions Fail to Stop Global Schools Group Data Leak.
  • Thu 13 Aug, 01:00 UTC. DataBreaches. More Novo Nordisk data dumped by FulcrumSec.
  • Sun 30 Aug, 18:32 UTC. Security Affairs. FulcrumSec claims 86GB MAG breach exposes 8.7 million.
  • Mon 31 Aug, 10:50 UTC. SecurityWeek. FulcrumSec Claims 8.7M Data Theft from Manchester Airports.
  • Wed 2 Sep, 08:28 UTC. Infosecurity, its first report on the story. FulcrumSec Claims Responsibility for Manchester Airport Group Breach.
  • Fri 4 Sep, 19:46 UTC. Security Affairs. Manchester Airports Group Data Breach Exposes 8.8 Million Records.
  • Wed 21 Oct, 22:05 UTC. Dark Reading. TiDB Breach Exposes Customer Data Despite No Database Access.

The article discusses the significant increase in cyberattacks targeting the education technology (EdTech) sector. Major groups like ShinyHunters and FulcrumSec have been identified as the perpetrators behind attacks that have compromised sensitive data and disrupted services for educational institutions.

Recent incidents include the theft of personal information from over 137,000 school staff accounts through a Salesforce breach, as well as a ransomware attack on the Global Schools Foundation that caused widespread disruption. These events highlight the vulnerability of EdTech organizations and the evolving tactics used by cybercriminals.

How the story developed

All 17 articles
Quiet for 9 dayslast report 21 Oct17 articles5 outlets

17 articles from 5 outlets since 12 Jun. Quiet since 21 Oct. This was the 5th report, 5 days after the first.

Now12 Jun2112 Aug1924292621 OctFirst reportDataBreaches · 12 Jun, 14:20This article5th of 17 · day 5
  • Fri 12 Jun, 14:20 UTC. DataBreaches, first report. FulcrumSec Breach Exposes 4.8TB of Data from Global Schools Group.
  • Tue 16 Jun, 01:30 UTC. DataBreaches. Novo Nordisk Faces Data Breach Exposing 11,500 Trial Records.
  • Tue 16 Jun, 12:47 UTC. SecurityWeek, its first report on the story. FulcrumSec Claims Novo Nordisk Hack, Steals 1.3TB of Trial Data.
  • Tue 16 Jun, 18:31 UTC. DataBreaches. One threat actor demanded $50 million from Novo Nordisk. Another one demanded $25 million. Neither got paid..
  • Wed 17 Jun, 10:09 UTC. Security Affairs, its first report on the story. EdTech firms hit by ShinyHunters and FulcrumSec cyberattacks. This article, 5th of 17.
  • Wed 17 Jun, 10:10 UTC. Security Affairs. FulcrumSec Targets Novo Nordisk, Leaks Clinical and Research Data.
  • Wed 17 Jun, 12:31 UTC. DataBreaches. Cybercriminals Are Targeting EdTech: Data Breaches and Ransomware Attacks on the Rise.
  • Thu 18 Jun, 17:20 UTC. DataBreaches. GSG breach leaks 183k accounts after plaintext password flaw.
  • Thu 18 Jun, 20:10 UTC. Dark Reading, its first report on the story. Novo Nordisk breach exposes 1.3TB after GitHub token leak.
  • Fri 19 Jun, 13:25 UTC. DataBreaches. Bombay Court Blocks Hacker Group From Leaking Kids' Data.
  • Sat 20 Jun, 13:31 UTC. DataBreaches. Injunctions Fail to Stop Global Schools Group Data Leak.
  • Thu 13 Aug, 01:00 UTC. DataBreaches. More Novo Nordisk data dumped by FulcrumSec.
  • Sun 30 Aug, 18:32 UTC. Security Affairs. FulcrumSec claims 86GB MAG breach exposes 8.7 million.
  • Mon 31 Aug, 10:50 UTC. SecurityWeek. FulcrumSec Claims 8.7M Data Theft from Manchester Airports.
  • Wed 2 Sep, 08:28 UTC. Infosecurity, its first report on the story. FulcrumSec Claims Responsibility for Manchester Airport Group Breach.
  • Fri 4 Sep, 19:46 UTC. Security Affairs. Manchester Airports Group Data Breach Exposes 8.8 Million Records.
  • Wed 21 Oct, 22:05 UTC. Dark Reading. TiDB Breach Exposes Customer Data Despite No Database Access.
  • No CVE
  • Larger: an outlet’s first report
  • Coverage over time
  • Quiet time, folded
Show all 17 articles as a list
  1. Fri 12 JunDay 01
    1. FulcrumSec Breach Exposes 4.8TB of Data from Global Schools Group14:20 · DataBreaches · First report

  2. Quiet for 3 days

    Tue 16 JunDay 43
    1. Novo Nordisk Faces Data Breach Exposing 11,500 Trial Records01:30 · DataBreaches · Picked up again
    2. FulcrumSec Claims Novo Nordisk Hack, Steals 1.3TB of Trial Data12:47 · SecurityWeek
    3. One threat actor demanded $50 million from Novo Nordisk. Another one demanded $25 million. Neither got paid.18:31 · DataBreaches
  3. Wed 17 JunDay 53
    1. EdTech firms hit by ShinyHunters and FulcrumSec cyberattacks10:09 · Security Affairs · This article, 5th of 17
    2. FulcrumSec Targets Novo Nordisk, Leaks Clinical and Research Data10:10 · Security Affairs
    3. Cybercriminals Are Targeting EdTech: Data Breaches and Ransomware Attacks on the Rise12:31 · DataBreaches
  4. Thu 18 JunDay 62
    1. GSG breach leaks 183k accounts after plaintext password flaw17:20 · DataBreaches
    2. Novo Nordisk breach exposes 1.3TB after GitHub token leak20:10 · Dark Reading
  5. Fri 19 JunDay 71
    1. Bombay Court Blocks Hacker Group From Leaking Kids' Data13:25 · DataBreaches
  6. Sat 20 JunDay 81
    1. Injunctions Fail to Stop Global Schools Group Data Leak13:31 · DataBreaches

  7. Quiet for 8 weeks

    Thu 13 AugDay 621
    1. More Novo Nordisk data dumped by FulcrumSec01:00 · DataBreaches · Picked up again

  8. Quiet for 3 weeks

    Sun 30 AugDay 791
    1. FulcrumSec claims 86GB MAG breach exposes 8.7 million18:32 · Security Affairs · Picked up again
  9. Mon 31 AugDay 801
    1. FulcrumSec Claims 8.7M Data Theft from Manchester Airports10:50 · SecurityWeek

  10. Quiet for 2 days

    Wed 2 SepDay 821
    1. FulcrumSec Claims Responsibility for Manchester Airport Group Breach08:28 · Infosecurity

  11. Quiet for 2 days

    Fri 4 SepDay 841
    1. Manchester Airports Group Data Breach Exposes 8.8 Million Records19:46 · Security Affairs · Picked up again

  12. Quiet for 7 weeks

    Wed 21 OctDay 1311
    1. TiDB Breach Exposes Customer Data Despite No Database Access22:05 · Dark Reading · Picked up again

Sources

CyberSIXTSignal over noise
Updated AboutDevelopersSign in