PrepHero-Linked Database Exposed Data of 3M Students and Coaches

PrepHero-Linked Database Exposed Data of 3M Students and Coaches

A security lapse on PrepHero, a college recruiting platform, exposed over three million unencrypted records including personal details and passport images of student-athletes. The sensitive database was quickly secured after discovery, but the incident highlights ongoing cybersecurity vulnerabilities in the education sector.
Affected: PrepHero, EXACT Sports

Keypoints

  • Over three million records, including personal and passport data, were exposed on PrepHero.
  • The database was unsecured with no password or encryption, making the data accessible online.
  • Exposed information included sensitive details about student-athletes, coaches, and parents, as well as email messages and audio recordings.
  • The incident underscores the rising cybersecurity risks faced by education and edtech companies.
  • Organizations should implement security measures like encryption, access controls, multi-factor authentication, and restricted access to sensitive data.

Read More: https://hackread.com/prephero-database-exposed-students-coaches-data/