An online tutoring program has revealed that it has suffered a data breach where an unauthorized individual may have compromised customer information.
The Hacker News received a copy of a message from Wyzant to its customers with information about the data breach. According to this letter, the online tutoring program discovered the security incident on 2 May when it found an anomaly in one of its databases. The company responded by launching an investigation, an attempt that revealed a data breach on April 27.
It is unclear how many of Wyzant's two million customers have fallen victim to the data breach or whether the security incident has affected the information of both students and teachers, of which there are currently 76,000. However, the online tutoring platform survey found that the event may have uncovered customer names, email addresses, zip codes, and their Facebook profile images when they used Facebook to verify themselves. It also turned out that the password, payment information and the activities of customers on the platform were secure.
In his letter, Wyzant explains that the answer was by tackling the unknown problem and assessing the scope of the incident. It also revealed that it set up an extensive audit of its systems and that it would inform customers about any further developments. As quoted by The Hacker News:
Wyzant has implemented additional security measures to prevent the recurrence of such an attack and to protect the privacy of our valued customers. This includes reviewing our security processes and protocols. We also work closely with law enforcement to ensure that the incident is handled properly.
In the meantime, the online tutoring program warned affected customers to watch out for phishing attacks where digital attackers could misuse their exposed information to request even more personal information. Users can defend themselves against attacks of this kind by familiarizing themselves with some of the most common types of phishing attacks. They should also consider taking additional measures to protect themselves against identity theft.