Data analysis of the Global Schools Group breach, Part 1

**Executive summary:** The report describes a major data breach of Global Schools Group (GSG) in which attackers accessed a centralized AWS-backed database and exfiltrated 183,164 user account rows (83k students, 88k parents, 11k staff), ~33k passport numbers, 23.8k government IDs (Aadhaar/NRIC/FIN/Emirates ID), 9.4 million internal messages (many containing medical and counseling disclosures), attendance records, job applicant documents, source code repositories, and 168 AWS secrets across 12 school brands and multiple countries; GIIS (Singapore) had the deepest exposure.