BlueLeaks 2.0: 7,300+ Schools, Referral Systems Reported, and a Breach Navigate360 Still Hasn’t Publicly Confirmed
ID: a353091e-6f80-5489-9c57-af81e486285b
STIX ID: report--a353091e-6f80-5489-9c57-af81e486285b
Feed Name: DataBreaches.Net
DataBreaches and other outlets report that an alleged compromise of P3 Global Intel / Navigate360 — labeled "BlueLeaks 2.0" or the "P3 Breach" — resulted in the theft of a large dataset (~93 GB, millions of tips) containing sensitive, identifiable tips from students, school staff, and others. The claimed attack vector involved social engineering to lure staff into a chat, XSS-based theft of authenticated session cookies and an IDOR that allowed cross-organization access; the attacker offered the dataset for sale while Navigate360 has communicated only to partners and not directly to affected individuals.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
