Legacy sign-on service comes back to bite school software provider Bromcom

Bromcom has notified customers that an unauthorized third party accessed a legacy SSO registration component and retrieved email addresses and limited registration metadata; the company says its Management Information System, passwords, and authentication tokens were not compromised, the legacy functionality has been withdrawn, and an external forensic investigation is ongoing.