Cybercriminals Are Targeting EdTech: Data Breaches and Ransomware Attacks on the Rise

The report details an escalating campaign of cyberattacks against the EdTech sector: ShinyHunters exfiltrated millions of student and staff records across multiple platforms and victims, while FulcrumSec carried out a large ransomware and double-extortion operation against the Global Schools Foundation, claiming vast sensitive datasets (including passports, messages, attendance records, source code, and secrets). The document outlines attacker tradecraft (API exploitation, cloud/database misconfigurations, leak sites), lists affected organizations, notes ongoing investigations, and recommends urgent measures such as stronger infrastructure security, threat detection/response, backups, training, and cyber insurance.