OVER 3M RECORDS, INCLUDING PII OF STUDENT-ATHLETES AND COLLEGE COACHES EXPOSED IN DATA BREACH

Summary from the TLDR InfoSec newsletter

Security researcher Jeremiah Fowler discovered a publicly accessible, unencrypted, and non-password-protected database belonging to PrepHero, which is a platform to assist high school athletes with securing scholarships. The database contained over 3M records that included full names, phone numbers, physical addresses, and passport data of students, as well as contacts of parents and college sports coaches. Fowler also discovered a CSV file containing links to passport images of student athletes and a mail archive that included PII sent to coaches.