GVM Technologies Breach Allegedly Exposes Student Passport Data
Summary
GVM Technologies, operating as GradSmart, reportedly suffered unauthorized access to a misconfigured MongoDB database. An unnamed actor claims over 2,000 student records, including at least 205 passport numbers, were exfiltrated.
Key points
- The database was reportedly misconfigured without an IP whitelist and contained plaintext credentials in environment files.
- The article says the configuration allowed unauthorized access to GVM Technologies’ MongoDB instance.
- An unnamed actor claims more than 2,000 student records were exfiltrated; the claim is not independently confirmed in the article.
- The reportedly affected data includes contact details, dates of birth, passport numbers, test scores, visa statuses, and academic and employment histories.
- The article says at least 205 passport numbers were included in the claimed exposure.
Article Details
- Victim Organization
- GVM Technologies (operating as GradSmart)
- Incident Type
- Alleged unauthorized access to a misconfigured cloud MongoDB instance and exfiltration of student data
- Data Types Exposed
- Full names
- Email addresses
- Mobile phone numbers
- Physical addresses
- Dates of birth
- Passport numbers
- Parent contact information
- Study-abroad destinations, target intakes, and university preferences
- IELTS and PTE test scores
- Visa application statuses
- Academic and employment history
- Affected Records
- The actor claims over 2,000 student records were exfiltrated; the article reports at least 205 instances of passport numbers.
- Operational Impact
- No operational disruption is reported. The alleged exposure may increase privacy and identity-theft risks for affected students.
- Claim Status
- claimed
Products
Countries
CanadaAccording to the actor, the exposed database contains over 2,000 student records primarily related to study abroad programs in the USA, UK, and Canada.United KingdomAccording to the actor, the exposed database contains over 2,000 student records primarily related to study abroad programs in the USA, UK, and Canada.United StatesAccording to the actor, the exposed database contains over 2,000 student records primarily related to study abroad programs in the USA, UK, and Canada.