Liabooks Home|PRISM News
Digital padlock opening with data streams and student silhouettes
TechAI Analysis

238,000 Records Exposed: The UStrive Data Security Lapse Crisis

2 min readSource

UStrive, an online mentoring platform, recently fixed a security lapse that exposed over 238,000 student records, including names and phone numbers, through a vulnerable GraphQL endpoint.

A platform built to guide the next generation just left their digital front door wide open. UStrive, a non-profit mentoring site for students, recently patched a security flaw that exposed the personal data of hundreds of thousands of users. This wasn't a sophisticated hack; it was a fundamental failure that allowed any logged-in user to see the private details of others.

Inside the UStrive Data Security Lapse

According to reports from TechCrunch, the vulnerability was found in a vulnerable Amazon-hosted GraphQL endpoint. By simply monitoring network traffic while browsing the site, anyone with an account could access reams of non-public data. At least 238,000 user records were confirmed to be at risk during the discovery phase.

  • Full names, email addresses, and phone numbers were fully visible.
  • Sensitive demographics like gender and date of birth were leaked for many students.
  • The platform claims to serve over 1.1 million students, making the potential scale even larger.

The company's reaction has been tight-lipped. UStrive's attorney stated they're currently in litigation with a former software engineer, which has limited their ability to respond. While CTO Dwamian Mcleish confirmed the issue has been "remediated," the non-profit hasn't committed to notifying the affected parents and students. It's still unclear if any malicious actors exploited the flaw before it was fixed.

This content is AI-generated based on source articles. While we strive for accuracy, errors may occur. We recommend verifying with the original source.

cybersecurityUStrive data security lapsedata breach 2026student privacyGraphQL vulnerability

Thoughts

Related Articles

7,000 Robot Vacuums Were Secretly Watching
TechEN
7,000 Robot Vacuums Were Secretly Watching

A security researcher discovered he could access 7,000 DJI robot vacuums and peek into strangers' homes. This Valentine's Day revelation exposes the hidden privacy risks of our smart home obsession.

Federal Agencies Breached for 10 Months by 'Second-Hand' Hacking Kit
TechEN
Federal Agencies Breached for 10 Months by 'Second-Hand' Hacking Kit

CISA orders emergency patches for iOS vulnerabilities exploited by sophisticated Coruna toolkit, revealing how cybercriminals weaponize already-patched flaws

3.4 Million Health Records Stolen in Year-Long Stealth Attack
TechEN
3.4 Million Health Records Stolen in Year-Long Stealth Attack

TriZetto confirms massive health data breach affecting 3.4 million people went undetected for nearly a year, exposing critical vulnerabilities in healthcare IT infrastructure.

Your Security Camera Just Became a Weapon of War
TechEN
Your Security Camera Just Became a Weapon of War

Iranian and Israeli forces are turning civilian security cameras into military surveillance tools, revealing how everyday IoT devices become part of modern warfare's kill chain.