Home / Technology / School App Breach Exposes Student Data
School App Breach Exposes Student Data
19 Feb
Summary
- Student admissions website Ravenna Hub had a security lapse.
- Personal data including names, birthdates, and addresses were exposed.
- The vulnerability was fixed the same day it was reported.
A critical security flaw affecting the Ravenna Hub student admissions website has been rectified. This platform assists families in applying to and tracking applications for numerous schools.
The vulnerability, identified as an insecure direct object reference (IDOR), allowed any logged-in user to access the personal data of other users. This exposed information encompassed children's names, birthdates, addresses, pictures, and school details, along with parents' email addresses and phone numbers.
Florida-based VentureEd Solutions, the developer of Ravenna Hub, confirmed they replicated and fixed the issue promptly after being alerted. The company stated the vulnerability was addressed on the same day it was discovered.
Despite the fix, the extent of any improper data access is under investigation, and it remains uncertain if users will be formally notified of the breach. The company has declined to comment on third-party security audits or internal oversight of cybersecurity measures.
This incident follows other recent security failures involving simple flaws that have compromised the personal information of children, highlighting ongoing concerns in online child data protection.
