PoinCampus Education Platform Breach Exposes 89,116 Student Records
What Happened – In November 2024 the South Korean online‑learning service PoinCampus was breached. Attackers extracted 89,116 user records that included email addresses, full names, dates of birth and phone numbers, and later posted the data on a public hacking forum.
Why It Matters for Trust & Control Assurance
- Continuous monitoring of data‑access controls is essential to detect and stop unauthorized extraction before it becomes public.
- Maintaining auditable logs and evidence of privacy safeguards provides a defensible audit trail for regulators and partners.
- Mapping privacy controls to a common framework simplifies proof of due‑diligence across multiple compliance regimes.
Who Is Affected – Education‑technology providers, SaaS platforms that store student personal data, and any organization that processes similar PII.
Recommended Actions – Align your privacy and data‑handling controls with the Verisq Common Framework, collect and retain detailed access logs, and conduct a privacy impact assessment to identify and remediate gaps. Source: [Have I Been Pwned – PoinCampus breach]
Technical Notes – The breach was disclosed on a hacking forum; the exact attack vector was not publicly identified. Exposed data types: email, name, date of birth, phone number. Source: [Have I Been Pwned – PoinCampus breach]