Data Breach of Spanish School Extranet Database via SQL Injection
On January 26, 2019, an unauthorized attacker exploited a SQL injection vulnerability in the website of a school in Spain. The attacker gained unauthorized access to the website’s user database and compromised the personal details of 1,555 registered extranet users, including parents and staff members. The exposed personal data included names, national ID (DNI) numbers, […]
Exposure of student council candidates’ national ID numbers on Instagram
Five minor students running for their high school’s student council had their full names and national identity card (DNI) numbers exposed online after another student photographed their election ballots and uploaded the image to Instagram. The ballots had been incorrectly generated with the DNI numbers by a regional school management system. The unauthorized post was […]
Student suspended after monitored social media post
A student was reportedly suspended after a personal Instagram post containing alcohol in the background was detected or acted upon through monitoring practices.
School surveillance cameras hacked and student video feeds streamed online
Hackers accessed surveillance cameras at several schools and livestreamed video feeds online. Students captured on the cameras experienced a privacy breach. This is a personal interview. Source available to SHIELD.