Supply chain [SC] Supply Chain

13,000 students in Singapore Third-Party Breach (August 2024)

2024-08-01 [vendor] Mobile Guardian
Primary Source ↗

Incident Details

Hacker wipes 13,000 devices after breaching classroom management platform. A hacker has breached Mobile Guardian, a digital classroom management platform used worldwide, and remotely wiped data from at least 13,000 student’s iPads and Chromebooks. Mobile Guardian, a ‘Google for Education’ partner, is a cross-platform (Android, Windows, iOS, ChromeOS, macOS) one-on-one solution for K-12 schools that offers a complete suite of device management, parental monitoring and control, secure web filtering, classroom management, and communications. The platform announced it suffered a security breach on August 4, 2024, where a hacker gained unauthorized access to its platform, impacting its North American, European, and Singaporean instances. Third-party company: Mobile Guardian.

Technical Details

Initial Attack Vector
Compromise of third-party service provider / vendor relationship
Vendor / Product
Mobile Guardian
Supply Chain Attack
✅ Confirmed third-party / vendor compromise

Timeline

  1. 2024-08-01 Breach occurred
  2. 2024-08-06 Publicly disclosed