ShadowByt3$ Claims Stride Learning Data Theft, Demands $500,000
Summary
ShadowByt3$ reportedly claims it compromised Stride Learning, stole corporate files and intellectual property, and demands $500,000. The actor says no student or teacher information was taken; the claims are unconfirmed.
Key points
- The article attributes the compromise and data-theft claims to threat actor ShadowByt3$; it provides no independent confirmation.
- The actor reportedly demands $500,000 in exchange for proof of data deletion.
- The actor claims the campaign, called Operation Cloud, targets organizations through misconfigurations.
- Allegedly taken material includes developer metadata, infrastructure maps, API endpoint configurations, curriculum files, and teaching-module source code.
- The actor claims no student or teacher information was compromised.
Article Details
- Victim
- Stride Learning Company
- Victim Domain
- Unknown
- Encryption Status
- Unknown
- Encrypted Size
- Unknown
- Exfiltration Status
- Claimed by ShadowByt3$; not independently confirmed in the article.
- Exfiltrated Data
- ShadowByt3$ claims to have taken corporate assets, including developer metadata, infrastructure naming maps, supply chain intelligence, technical files and configuration data, intellectual property, curriculum materials, source code, branded graphics, training videos, and phishing kits. The actor claims no student or teacher information was compromised.
- Exfiltrated Size
- Unknown
- Ransom Demand
- ShadowByt3$ is reportedly demanding $500,000 in exchange for proof of data deletion.
- Leak Status
- Unknown