Original Release Date: 4/20/2023
iD Tech, an online children’s academy that offers a variety of STEM courses, suffered a data breach in February, and nearly one million records were subsequently posted to a popular dark web hacking forum. Compromised data includes 415,000 unique email addresses, names, dates of birth, and plaintext passwords. While this breach is not new, the NJCCIC’s intelligence platform recently observed nearly 600 of its monitored enterprise domain users are impacted, further indicating that many more New Jersey residents are likely affected by this breach. iD Tech customers are urged to change their passwords immediately for all platforms using compromised credentials and enable multi-factor authentication on all accounts where applicable. Additionally, parents and guardians are urged to educate children about potential phishing attempts.