Appscook Data Breach: App Used by Hundreds of Schools Leak Children’s Data

In a recent investigation, a team of security researchers from cybersecurity firm Cybernews found that IT company Appscook – which develops applications used by more than 600 schools in India and Sri Lanka for academic management – leaked a startling quantity of private information, including birth certificates, home addresses, and images of minors.

Nearly a million confidential data were stored in a DigitalOcean storage bucket that was accessible to everybody without the need for authentication. Given that the majority of the compromised files reveal children, leaking private information online in this instance is extremely dangerous.

The stolen data included:

  • Students’ names
  • Names of parents
  • Pictures of students attending pre-primary, primary, and secondary schools
  • Names of the schools’ children attend
  • Birth certificates
  • Fee receipts
  • Student report cards/exam results
  • Home addresses
  • Phone numbers

The company’s 96 school-specific apps are designed to facilitate online learning and allow parents and schools to communicate directly about their child’s daily activities and academic progress. Over a million parents and over half a million pupils use the platform, according to the company’s website.

Cybernews attempted to contact Appscook over the issue, but did not r

[…]
Content was cut in order to protect the source.Please visit the source for the rest of the article.

This article has been indexed from CySecurity News – Latest Information Security and Hacking Incidents

Read the original article: