What Happened in the Seesaw Hacking Incident?

TL;DR

Seesaw, an elementary school learning platform, was hacked, leading to explicit images being shared via its messaging feature. The hack occurred due to credential stuffing, where reused passwords allowed unauthorized access to some accounts. As a result, Seesaw disabled messaging access and is considering implementing two-factor authentication to enhance security.

Transcript

but five users of an app called seesaw got a big surprise this morning and several local school districts have been affected by a hack of an elementary school learning platform all day we had no idea like what was going on that app called seesaw says a link with an explicit image was shared via the messaging feature that a virus caused an inappropr... Read More

Key Insights

• 👨‍🏫 Seesaw, an elementary school learning platform, experienced a hack that involved explicit content being shared through its messaging feature.
• ♿ The company disabled message access after reports of inappropriate messages.
• 🔑 The hack was likely the result of reused passwords, highlighting the importance of using strong and unique passwords.
• 🧑‍🏭 Seesaw is investigating the incident and considering adding two-factor authentication to improve security.
• 🎓 Education privacy advocate Bill Fitzgerald questioned whether the incident could have been a different type of data breach.
• ❓ Environmental activists are concerned about the effects of data breaches on platforms like Seesaw.
• 👨‍🏫 Some school districts disabled Seesaw entirely as a precautionary measure.

Questions & Answers

Q: How did Seesaw become aware of the hacked messages?

Seesaw became aware of the issue when users reported receiving messages with inappropriate links and images. The company disabled message access as a response.

Q: What technique was used in the hack?

The technique used was credential stuffing, where email and password combinations obtained from other data breaches were used to access some Seesaw accounts.

Q: Did Seesaw confirm a compromise in their system?

Seesaw stated that their platform was not compromised, but individual accounts were affected. They believe the hack occurred due to reused passwords.

Q: Will Seesaw implement two-factor authentication in the future?

Seesaw is currently looking into adding two-factor authentication support in order to enhance security and prevent similar incidents.

Summary & Key Takeaways

• Seesaw, an app used by many schools in the US, discovered that parents and teachers were receiving messages containing inappropriate links.

• The links directed users to explicit photos and caused concern among the public.

• Seesaw disabled message access and claimed that individual accounts were compromised due to reused passwords.