ANOTHER HACK: Motherboard reports that a hacker has stolen 77 million user accounts from Edmodo, a social learning platform used widely in K-12 schools around the world. The breached information includes usernames, email addresses and hashed passwords, and is apparently up for sale on the dark web.
This is the second known large-scale data breach of an education technology company this year. In April, a security researcher found that Schoolzilla, which offers data warehousing services and tools to districts, had been backing up personally identifiable student data to a publicly accessible location on Amazon S3. The company was able to verify that no one else had accessed the data.
Mollie Carter, the company’s vice president of marketing and adoption, offered this statement:
“Edmodo has learned about a potential security incident. Protecting the privacy of our users is of the utmost importance to Edmodo. We take this report very seriously, and we are investigating. We have no indication at this time that any user passwords have been compromised, and we want to let everyone know that we are working with law enforcement. We have no other confirmed information to share right now.”
This story will be updated as new information is available.