FulcrumSec Breach Exposes 4.8TB of Data from Global Schools Group

The Global Schools Foundation (GSF), a non-profit K-12 education organization based in Singapore, experienced a significant data breach in April 2026, perpetrated by a group known as FulcrumSec. They accessed sensitive data from the Global Schools Group (GSG), which manages 12 international school brands across various countries. The breach exposed 4.8 terabytes of data, including 33,088 passport numbers, 9.4 million internal messages, plaintext passwords for teachers, and numerous confidential documents.

FulcrumSec criticized GSG's handling of the breach and its negotiation tactics, claiming GSG lied during discussions and displayed bizarre behavior. The breach prompted regulatory investigations, with parents and employees warned about potential identity theft and phishing attacks. Recommendations were made for improved security practices and accountability from GSG.