$100 Million awarded Since 1994 6,000 Satisfied Clients

Posted On February 15, 2024 Consumer Privacy & Data Breaches

Edulog Data Breach Class Action Investigation and Lawsuit Assistance

NOTICE: If you received a NOTICE OF DATA BREACH letter from Edulog, contact the attorneys at Console & Associates at (866) 778-5500 to discuss your legal options, or submit a confidential Case Evaluation form here.

 

February 15 – The data breach lawyers at Console & Associates, P.C. are investigating the Edulog data breach that was reported after the company was targeted in a recent cyber security attack. The Education Logistics data breach resulted in data regarding students, their schools, parents, bus routes, GPS information, and proximity to given bus stops being compromised.

What Happened?

According to the leading cyber security firm, Tenable, the Edulog data breach was reported after they were targeted in a recent cyber security attack. Edulog typically requires users to create a login with a code that is provided by their child’s school. However, Tenable discovered that student information was accessible to those who created a free account (without a login code provided by the school). Thus, anyone who wanted to could have created a free Edulog account and accessed sensitive information about students provided they had knowledge of the vulnerability.

In fact, to verify its discovery, Tenable researchers registered for an account and accessed large amounts of potentially sensitive information without the need for any sort of verification or registration code. Edulog has not yet notified parents about the vulnerability, and does not appear as though the company intends to provide notification in the future.

About Edulog

Education Logistics, Inc., better known as Edulog, is a software company and app developer based out of Missoula, Montana that Data Breach Alertcreates software for school districts that allows administration and parents to track school bus locations. Edulog also provides route-planning software and created a parent portal for parents to obtain real-time access to the location of their child’s school bus.

Can I File An Edulog Data Breach Class Action Lawsuit?

Our data breach lawyers are eager to speak to victims of the Edulog data breach to determine what damages they sustained and what compensation may be available to them. Victims can file a data breach class action lawsuit if you recently received a NOTICE OF DATA BREACH from Edulog. Contact the Console & Associates, P.C. law firm at (866) 778-5500 for a free consultation to discuss your legal options, or submit a confidential contact form.

Also, consider reading our Guide for Victims of a Data Breach to learn what your next steps should be. Data breach victims should remain alert for signs of identity theft and take steps to secure their accounts and personal information.

External Links:

  1. Tenable Research – https://zh-tw.tenable.com/security/research/tra-2023-41
  2. Tenable Article – https://zh-tw.tenable.com/blog/the-kids-arent-alright-vulnerabilities-in-edulog-portal-revealed-k-12-student-location-data
  3. The Journal Article – https://thejournal.com/articles/2023/12/14/vulnerabilities-in-edulog-portal-revealed-bus-location-data-logins-for-6m-students.aspx
NOTICE: If you received a NOTICE OF DATA BREACH letter from Edulog, contact the attorneys at Console & Associates at (866) 778-5500 to discuss your legal options, or submit a confidential Case Evaluation form here.