Archive — US — techcrunch
UStrive security lapse exposed personal data of its users, including children
UStrive, an online mentoring platform, faced a security lapse that exposed personal data of over 238,000 users, including children. The information was accessible to any logged-in user, raising concerns over user privacy. UStrive has since claimed the issue has been remediated, but there is uncertainty about user notification and potential data breaches.
Key points
- A security lapse on UStrive exposed personal information of 238,000 users.
- Data included full names, email addresses, phone numbers, and other non-public information.
- The vulnerability was linked to an Amazon-hosted GraphQL endpoint.
- UStrive has over 1.1 million users who opted for mentorship.
- The firm is currently dealing with a lawsuit involving a former software engineer.
- TechCrunch verified the data breach after creating a new user account and alerted UStrive executives.
Why it matters
- The incident reflects ongoing concerns about data security in educational technology.
- Similar breaches in the past have prompted stricter regulations and calls for better cybersecurity practices in the tech industry.
- By 2025, trends show increased emphasis on data privacy and security measures, especially for platforms handling minors' information.
The UStrive security incident underscores the critical importance of data protection, especially for educational platforms, and raises questions about user trust and corporate accountability in the digital age.