Breach Disclosure: ProctorU

An online exam tool, ProctorU, experienced a data breach back in June 2020, with around 444,000 users data impacted by this breach. According to Bleeping Computer, ProctorU is one of 18 companies whose data was released by a hacker known as "ShinyHunters". Subsequently, the stolen data was shared extensively throughout online hacking communities.

Recommendations

Enable 2-factor authentication for all of your organizational accounts to help mitigate phishing and credential stuffing attacks
If not already enabled, turn on the compromised credentials rule for all relevant entities and ensure relevant emails are entered for those entities, or reach out to [email protected] for assistance
If one of your entities receives an alert, ZeroFOX recommends immediate password changes for the affected account.

Details

The data included in the breach contained emails, physical addresses, names, phones and bcrypt password hashes. In addition to user data, the breach contained names, addresses, user names and unencrypted passwords for members of the University of Sydney staff.

Many of the universities included in the breach began using ProctorU in the wake of the COVID-19 pandemic, since many schools were forced to use online options for training and administering tests.

Figure 1: ProctorU breach data listing for sale