EDUCATION GIANT PEARSON HIT BY CYBERATTACK EXPOSING CUSTOMER DATA

Summary from the TLDR InfoSec newsletter

Pearson has reported that an attacker breached its systems and stole “legacy” data. Other sources revealed that the stolen data was obtained via an exposed .git/config file containing a GitLab Personal Access Token (PAT), which was used to obtain hardcoded secrets for cloud platforms and data stores from source code. The stolen data allegedly contains customer information, financials, support tickets, and source code.