Skip to content

Breaches that exposed children's data

23 breaches, most recently disclosed first. The list grows as new ones are disclosed.

OrganizationAffected
MathspaceMathspace Metabase breach exposes 1,079,819 students, parents and staffSep 33 weeks agoSupply chainUnverified1.1M
InstructureInstructure Canvas breach exposes students' messages at nearly 9,000 schoolsMay 24 months agoExtortionUnverifiedUnknown
VenturEd SolutionsAdmissions platform bug exposed over 1.6 million student recordsFeb 197 months agoExposed dataUnverifiedUnknown
BonduAI plush toy's open web console exposed 50,000 children's chat logsJan 297 months agoExposed dataUnverifiedUnknown
Victorian Department of EducationHackers access Victorian school student database, passwords resetJan 148 months agoHackingUnverifiedUnknown
DreamXAI image generator database exposed over 1M mostly explicit images, some of minorsDec 4, 20259 months agoExposed dataUnverifiedUnknown
Illuminate EducationHacker used ex-employee's credentials to access data of 10.1M students; FTC orderDec 1, 20259 months agoHacking10M
Kido InternationalRadiant hackers steal photos and data of 8,000 London nursery childrenSep 25, 20251 year agoExtortionUnverifiedUnknown
Baltimore City Public SchoolsBaltimore City Public Schools breach affects over 31,000 peopleApr 22, 20251 year agoRansomware31K
PowerSchoolHacker steals K-12 student and teacher records from PowerSchool SISJan 7, 20251 year agoHackingUnknown
Alder Hey Children's HospitalInc Ransom claims theft of patient records from Alder Hey Children's HospitalDec 4, 20241 year agoRansomwareUnverifiedUnknown
State of MaineMOVEit breach exposes data of 1.3 million people across Maine agenciesNov 10, 20232 years agoSupply chain1.3M
BORN OntarioMOVEit breach exposes perinatal and child registry data of 3.4 millionSep 25, 20233 years agoSupply chainUnverified3.4M
New York City Department of EducationMOVEit breach exposes data of about 45,000 NYC students and staffJun 26, 20233 years agoSupply chainUnverifiedUnknown
Herff JonesApril 2021 card breach hit thousands of students; USD 200,000 NY and PennsylvaniaDec 16, 20223 years agoHackingUnknown
Tusla Child and Family AgencyUnredacted documents revealed children's and foster carers' addresses; EUR 75,000 DPC fineNov 4, 20205 years agoInsiderUnknown
Facebook2018 View As token theft hit 29M Facebook accounts; Irish DPC fines of EUR 251MSep 28, 20187 years agoHacking29M
VTech2015 breach exposed parent and child profiles; USD 650,000 FTC COPPA settlementNov 25, 201510 years agoHacking4.8M
Medical Informatics EngineeringHack of EHR vendor and NoMoreClipboard exposes data of 3.9 millionJun 19, 201511 years agoHacking3.9M
Princeton ReviewTest prep firm published student data and scores on its websiteAug 18, 200818 years agoExposed dataUnverified108K
Legal Aid AgencyTwo lost discs held child benefit data of 25 million UK residentsNov 20, 200718 years agoLost or stolen deviceUnverified25M
Georgia Department of Community HealthVendor loses disk with 2.9 million Medicaid and PeachCare members' dataApr 10, 200719 years agoVendor breachUnverified2.9M
Akron Children's HospitalOverseas hackers break into hospital computers with data of 235,903Oct 26, 200619 years agoHackingUnverified236K

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.