Skip to content

Pearson

Disclosed Jul 31, 20197 years agoUnverified

2018 breach of student records misrepresented to investors; USD 1M SEC penalty

Hackers stole millions of student usernames and hashed passwords plus administrator logins for 13,000 school and university accounts from Pearson's AIMSweb system in 2018. The SEC found Pearson called the breach hypothetical in filings and understated it, and fined it USD 1M.

What is known

People affectedNot stated in the sources we have
DisclosedJul 31, 2019
AttackHacking
Data exposedCredentials and tokens, Names, Dates of birth, Emails, Education records
SectorEducation · GB
StatusUnverified: not yet confirmed by an official notice, a filing or the organization
Lawsuit or fineUSD 1M SEC civil penalty (Aug 2021) (about $1M)

Sources

Notices filed

WhereFiledPeople
ResearchtotalJul 31, 2019
History of this record
  • 2026-09-25 · added · seed source

First seen 2026-09-25 (Research). Record counts are as reported. Not legal advice.

Everything about Pearson

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.