Breachesby GlyphPearson
Disclosed Jul 31, 2019Unverified
2018 breach of student records misrepresented to investors; USD 1M SEC penalty
Hackers stole millions of student usernames and hashed passwords plus administrator logins for 13,000 school and university accounts from Pearson's AIMSweb system in 2018. The SEC found Pearson called the breach hypothetical in filings and understated it, and fined it USD 1M.
What is known
| People affected | Not stated in the sources we have |
|---|---|
| Disclosed | Jul 31, 2019 |
| Attack | Hacking |
| Data exposed | Credentials and tokensNamesDates of birthEmailsEducation records |
| Sector | Education · GB |
| Status | Unverified: not yet confirmed by an official notice, a filing or the organization |
| Lawsuit or fine | USD 1M SEC civil penalty (Aug 2021) (about $1M) |
Sources
Notices filed
History of this record
First recordedby seedSource
First seen 2026-09-25 (Research). Record counts are as reported. Not legal advice.