MATHSPACE DISCLOSES DATA BREACH AFFECTING OVER 1M PEOPLE

Summary from the TLDR InfoSec newsletter

Online math learning software Mathspace disclosed a data breach affecting over 1M students, guardians, school staff, and Mathspace staff from Australia and New Zealand. The attackers exploited a vulnerability in a self-hosted Metabase instance used for internal reporting. Mathspace did not disclose exactly what data was breached but stated that academic records, authentication credentials, or any data linking records to a school (other than potentially email domains) were not leaked.