Gran Cursos Online, a prominent Brazil-based EdTech company and leader in test preparation for public exams, has allegedly been compromised. An unidentified threat actor claims to have exfiltrated a database containing approximately 570,000 user entries from the platform, which reportedly serves over 400,000 paying students. The actor is currently offering the data for sale for $500, stating that only one copy will be sold.
According to the actor, the leak consists of MS Sessions and PHP Sessions which expose sensitive user activity and personal identifiable information (PII). The allegedly compromised data includes:
-
Full names
-
Email addresses
-
CPF numbers (Brazilian Individual Taxpayer Registry IDs)
-
Dates of birth
-
Physical addresses, cities, and ZIP codes
-
IP addresses and device fingerprints
-
Session tokens and JWT authentication keys
-
Subscription details and purchase history
