Cambodian Education Giant MJQ Education Allegedly Breached, Applicant Data Leaked

Mengly J. Quach Education (MJQ Education), a leading educational institution in Cambodia, has allegedly suffered a significant data breach. A threat actor has claimed responsibility for the attack, leaking sensitive information purportedly belonging to job applicants via a dark web forum. The compromised data appears to have been lifted from the institution’s recruitment portal, recruitment.mjqeducation.edu.kh.

MJQ Education is one of the largest educational providers in the nation, operating the prominent Aii Language Centers and American Intercon School system. The company holds the distinction of being the first educational services provider to be listed on the Cambodia Securities Exchange, highlighting its importance in the country’s development. The breach reportedly originated from a forum post containing a link to a folder with the leaked information.

The leaked files allegedly contain a trove of personally identifiable information (PII) from individuals who have applied for positions at the institution. Analysis of the provided sample documents suggests the breach includes a wide range of sensitive data. The compromised information allegedly includes:

• Curriculum Vitae (CVs)
• National ID cards
• COVID-19 vaccination cards
• Provisional certificates and educational documents
• Family and residence books (Sៀវភៅស្នាក់នៅ)

This incident raises serious privacy concerns for the individuals whose data has been exposed. The availability of such comprehensive personal information on the dark web could potentially lead to identity theft, fraud, and other malicious activities targeting the victims.