ShadowByt3s Claims Exposure of Data From 8+ Indian Schools
Summary
The article reports ShadowByt3s claims of accessing cloud storage associated with Ellucian PowerCampus and exposing data from more than eight schools in Manipur and Meghalaya. The claims and extent of access are not independently verified in the supplied content.
Key points
- The article attributes the reported incident to ShadowByt3s and says it involved Ellucian PowerCampus and cloud storage managed by Neoskool.
- It reports that data from more than eight schools in Manipur and Meghalaya was exposed.
- The data allegedly includes student photos, Aadhaar numbers, plaintext passwords, medical alerts, academic and financial records, and staff personal information.
- The article says AWS canary files and manifests indicate claimed write and delete access, which could allow data modification or destruction.
- It reports that ShadowByt3s is extorting Ellucian and has published data samples; these assertions are not independently verified in the supplied content.
Article Details
- Victim Organization
- Multiple Indian schools using Ellucian PowerCampus; school names not disclosed
- Incident Type
- Reported data breach involving misconfigured cloud storage used by Ellucian PowerCampus
- Data Types Exposed
- Student photos
- Aadhaar numbers
- Plaintext passwords
- Medical alerts
- Timetables
- Staff personally identifiable information and contact lists
- Financial aid and payment details
- Academic records and marksheets
- Affected Records
- Data from more than eight schools; record count not disclosed
- Affected Data Size
- Not disclosed
- Operational Impact
- Student and staff data was reportedly exposed. ShadowByt3s claims write and delete access to cloud storage, creating potential for data modification or destruction; no such disruption is reported.
- Ransom Or Extortion
- The article says ShadowByt3s is extorting Ellucian, recruiting insiders with a proposed 30/70 revenue split, and has published samples on a leak site. No ransom amount is stated.
- Claim Status
- claimed
MITRE ATT&CK
Threat Actors
Vendors
EllucianShadowByt3s compromised the Ellucian PowerCampus platform via misconfigured Amazon S3 buckets and Azure blobs managed by Neoskool, exposing data from more than eight schools in Manipur and Meghalaya.NeoskoolShadowByt3s compromised the Ellucian PowerCampus platform via misconfigured Amazon S3 buckets and Azure blobs managed by Neoskool, exposing data from more than eight schools in Manipur and Meghalaya.