I'm hearing "this could happen to anyone". What? No. Forget the mistake of setting the S3 bucket to public. Why is an EdTech company storing student data in plain text? Perhaps Schoolzilla should spend less time on glitz for sales demos and more on basic security and data privacy. This willful negligence is extremely damaging to the entire EdTech industry. https://lnkd.in/eqntn7u

Sources:
https://mackeepersecurity.com/post/schoolhouse-data-breach
[Link]