According to Security NEXT, Schoo announced that an error in trial account management for the group learning feature of Schoo for Business allowed certain users to view personal information of other users [1]. The issue spanned from March 30, 2020, to December 23, 2024, affecting 190 room hosts and 690 participants in the direct trial channel, as well as six room hosts and 94 participants across certain partner channels [1]. Visible information varied by role and included names, company names, and profile photos; the company discovered the issue on December 19 after receiving a user report [1].
This event has not been officially confirmed. Content is based on media or third-party reports.
Backfill: this event became public on Dec 27, 2024 and we added it on Nov 10, 2026. It is not a new event.
HighMonitoringBackfillMedia reported
Schoo for Business Trial Account Misconfiguration Allows Users to View Personal Data Across Companies
1 min read
- Disclosed
- Dec 27, 2024
- Published
- Nov 10, 2026
- Last updated
- Nov 7, 2026
- CVSS basis
- Our assessment
- Attack vector
- Impact
- Actor type
- Motivation
On this page
30-second summary
What happened
Who is affected
Industries mainly affected: Education
What to do nowOur advice
Visible information varied by role and included names, company names, and profile photos; the company discovered the issue on December 19 after receiving a user report [1].
Timeline
- Security NEXT publishes report (date only; timestamp is a placeholder)[1]
Technical details
Verified Source Summary
Schoo announced that an error in trial account management for the group learning feature of Schoo for Business allowed certain users to view personal information of other users [1].
The issue spanned from March 30, 2020, to December 23, 2024, affecting 190 room hosts and 690 participants in the direct trial channel, as well as six room hosts and 94 participants across certain partner channels [1].
Visible information varied by role and included names, company names, and profile photos; the company discovered the issue on December 19 after receiving a user report [1].
References
Media1
- [1]
“社会人向けオンライン学習サービスを提供しているSchooは、同社サービス「Schoo for Business」において、特定の利用者間で個人情報が流出したことを明らかにした。同一アカウントが割り振られていたのが原因だという。”
This site aggregates public information and is not security consulting advice. Test remediation steps before applying.