Actor claims to sell 1.65 million records from education platform CIS360
A threat actor on an underground forum claims to sell about 1,646,292 records from CIS360, an online education platform used by schools in several US states. The dataset, offered for $175 with a 1,000-line sample, would include names, email addresses, usernames, graduation years and account IDs, with the largest claimed shares in South Carolina, Missouri and Minnesota. The claim is unverified; the immediate response is to warn students and alumni about phishing and strengthen account security.
What happened
A threat actor on an underground forum claims to sell about 1,646,292 records from CIS360, an online education platform used by schools in several US states. The claimed data includes names, email addresses, usernames, graduation years and account IDs. The claim has no independent verification and there is no confirmed breach.
Why it matters
If genuine, the material exposes students and alumni to phishing and account takeover, with young users flagged as the main target. The largest claimed shares are in South Carolina, Missouri and Minnesota. The set is offered for $175 with a 1,000-line sample.
What to do
Warn students and alumni about phishing attempts, strengthen passwords and second-factor authentication on accounts, and monitor messages citing graduation years or account IDs. Seek confirmation from CIS360.
For the technical team
- Affected
- cis360.org, plataforma de educação online usada por escolas em vários estados dos EUA · CIS360 (cis360[.]org), an online education platform used by schools in several US states. No versions cited in the sources.
- Exploitation
- No confirmed exploitation. Alleged sale on an underground forum reported by DailyDarkWeb; the claim has no independent verification.
- Fix
- No fix cited; the sources mention no patch or specific product vulnerability.
- Vector
- Actor's claim: access via a login portal and a container-level foothold in the infrastructure. The actor says container isolation stopped deeper access. Nothing has been verified.
- More details
- Dataset offered for $175 with a 1,000-line sample. Records broken down by US state; largest claimed shares in South Carolina, Missouri and Minnesota. Cited fields: names, email addresses, usernames, graduation years and account IDs. DailyDarkWeb analyst note: main risk is phishing and account takeover against students and alumni.
Timeline
First claim selling the platform's data appears on an underground forum.
Sources 1 source
- @DailyDarkWeb @DailyDarkWeb
