Listen to this Post
A Silent Cyberstorm Hits Russia’s Education Sector
A new and alarming claim is rippling through the cybersecurity community after a threat actor known as Angel_Batista surfaced on underground forums, alleging the sale of sensitive data belonging to 13.6 million users of Foxford, one of Russia’s most recognizable online education platforms. The database is reportedly being advertised via the Tor network, raising fears that this incident could rank among the largest education-sector data breaches of 2024–2026. If verified, the exposure could have long-term consequences for students, parents, and educators alike.
the Original Report
According to a post shared by Cybersecurity News Everyday, the threat actor Angel_Batista claims to be in possession of a massive dataset allegedly stolen from Foxford’s systems. The data is said to include information tied to approximately 13.6 million users, an unusually high number for an education-focused platform, immediately triggering red flags across the infosec community.
The seller reportedly listed the dataset for sale on darknet marketplaces, using Tor-based infrastructure to conceal their identity and location. While no technical breach details were disclosed publicly, the scale of the claimed leak suggests either prolonged unauthorized access or a compromise of centralized databases.
Cybersecurity observers note that education platforms have increasingly become attractive targets due to their vast repositories of personal data, often protected by weaker security postures compared to financial or government systems. The claim has not yet been officially confirmed by Foxford, and no public statement has been released addressing the alleged breach.
Despite the lack of confirmation, the incident has already gained attention because of its potential scale, timing, and the growing trend of threat actors monetizing educational data. If authentic, the leak could include student profiles, contact information, learning histories, and possibly parental data, creating serious privacy and identity theft risks.
What Undercode Say:
This alleged Foxford breach highlights a persistent and uncomfortable truth: EdTech security is lagging behind its growth. Platforms handling millions of minors and young adults often prioritize scalability and content delivery over hardened security architectures. A dataset of 13.6 million users does not leak overnight—it points to systemic weaknesses, delayed detection, or both.
From an attacker’s perspective, education data is undervalued publicly but highly profitable underground. Student records can be repurposed for phishing, account takeovers, credential stuffing, and long-term identity fraud. In regions where digital education expanded rapidly during and after the pandemic, security debt accumulated just as fast.
The use of Tor for data sales is also telling. It suggests confidence from the threat actor and an expectation of high demand. Education-sector breaches historically receive less media scrutiny than healthcare or finance, which often translates into slower response times and quieter settlements. That silence benefits attackers.
If Foxford confirms the breach, regulatory consequences in Russia could follow, but the broader issue extends beyond one platform. This case reinforces the need for mandatory breach disclosures, independent security audits, and stricter data minimization across EdTech ecosystems. Until education providers treat user data with the same rigor as banks treat money, incidents like this will continue to scale.
🔍 Fact Checker Results
✅ A threat actor named Angel_Batista publicly claimed possession of Foxford user data.
❌ No official confirmation from Foxford has been released at the time of reporting.
⚠️ The exact contents of the alleged 13.6 million-user dataset remain unverified.
📊 Prediction
Education platforms will become top-tier targets in 2026, with more large-scale leaks surfacing from EdTech providers. As attackers realize the long-term value of student data, underground markets for educational records are likely to expand rapidly.
🕵️📝✔️Let’s dive deep and fact‑check.
References:
Reported By: x.com
Extra Source Hub (Possible Sources for article):
https://www.medium.com
Wikipedia
OpenAi & Undercode AI
Image Source:
Unsplash
Undercode AI DI v2
Bing
🔐JOIN OUR CYBER WORLD [ CVE News • HackMonitor • UndercodeNews ]
📢 Follow UndercodeNews & Stay Tuned:
𝕏 formerly Twitter 🐦 | @ Threads | 🔗 Linkedin | 🦋BlueSky | 🐘Mastodon
