Data analysis of the Global Schools Group breach, Part 2

**Executive summary:** DataBreaches published aggregated totals from a confirmed data exfiltration of Global Schools Group by an attacker claiming the name FulcrumSec; the leak includes ~183,164 user account records, 35,938 detailed student enrollment records with extended PII, millions of internal messages and attendance records, source code, secrets, and thousands of applicant documents. The report highlights severe security failures including 12,303 plaintext passwords (12,301 identical) and weak access controls that allowed broad, undetected access across multiple school brands and international campuses.