As a result, 100,000s students were potentially exposed to a range of online attacks.
Their private data including their grades and personal information was made available to anyone with a web surfing app.
In total, the buckets contained more than 22 TB of data and over 117 million files.
Students used this software to access lectures, upload homework, and much more.
It is important to note that Amazon isnt responsible for the misconfiguration.
After getting no response, we tried other ways to communicate with the company.
By using McGraw Hills live chat on their website, we received contact information for their senior cybersecurity director.
Meanwhile, leaked source code allows bad actors to more easily search for other vulnerabilities.
We estimate that this exposure potentially affected 100,000s students.
In a phishing campaign, criminals send victims fake emails imitating real businesses and organizations.
The data breach is also aviolation of privacyfor students using McGraw Hills software and services.
It exposed sensitive information like completed assignments and performance reports.
An important part of the university experience is having a safe environment to learn and progress.
Theyre usually the result of an error by the owner of the bucket.
Amazon provides detailed instructions to AWS users to help them secure S3 buckets and keep them private.
About Us and Previous Reports
vpnMentoris the worlds largest VPN review website.
Our ethical security research team has discovered and disclosed some of the most impactful data breaches in recent years.
This has included an enormous data breach exposingover 10,000 students from a document verification program in Israel and India.
You may also want to read ourVPN Leak Report and Data Privacy Stats Report.
The purpose of this web mapping project is to helpmake the internet safer for all users.
We never sell, store, or expose any information we encounter during our security research.
c’mon, comment on how to improve this article.
