A threat actor claims to have breached Coursemonster, an educational platform based in New Zealand. The actor has listed a database containing over 67,000 rows of user information for sale on a public forum.
According to the actor, the allegedly compromised data includes a wide range of personally identifiable information. The exposed data fields are reported to be:
- First names
- Last names
- Account names
- Mailing addresses (street, city, state, postal code, country)
- Phone numbers
- Mobile numbers
- Fax numbers
- Email addresses
