{"id":93818,"date":"2025-05-09T15:00:07","date_gmt":"2025-05-09T15:00:07","guid":{"rendered":"https:\/\/pakistaninewspaperlist.com\/news\/pearson-hit-by-cyberattack-source-code-customer-info-cloud-data-stolen-the-express-tribune\/"},"modified":"2025-05-09T15:00:07","modified_gmt":"2025-05-09T15:00:07","slug":"pearson-hit-by-cyberattack-source-code-customer-info-cloud-data-stolen-the-express-tribune","status":"publish","type":"post","link":"https:\/\/pakistaninewspaperlist.com\/news\/pearson-hit-by-cyberattack-source-code-customer-info-cloud-data-stolen-the-express-tribune\/","title":{"rendered":"Pearson hit by cyberattack: Source code, customer info, cloud data stolen | The Express Tribune"},"content":{"rendered":"
\n

UK-based education giant Pearson has confirmed a significant cyberattack that exposed sensitive customer data, internal corporate information, and cloud infrastructure, BleepingComputer reported on Thursday.<\/p>\n

In a statement, Pearson acknowledged the breach, stating that an unauthorized actor had accessed part of their systems and downloaded what the company described as “largely legacy data.”<\/p>\n

While employee data was not affected, customer and partner data may have been compromised.<\/p>\n

The company is still investigating the scope of the breach.<\/p>\n

The breach reportedly stems from an exposed GitLab Personal Access Token (PAT) found in a public .git\/config file, which granted attackers access to Pearson\u2019s internal source code and hard-coded credentials for AWS, Google Cloud, and Salesforce CRM.<\/p>\n

According to sources, the attackers used the access to extract terabytes of data, including customer records, financial documents, support tickets, and internal cloud data \u2014 potentially impacting millions of users worldwide.<\/p>\n

Pearson stated they have involved law enforcement and deployed new security measures, including improved monitoring and authentication protocols.<\/p>\n

However, the company declined to comment on whether a ransom was paid or how many customers were affected.<\/p>\n

The incident is reportedly linked to a January breach of Pearson\u2019s subsidiary PDRI, suggesting the attack may have unfolded over several months.<\/p>\n

Security researchers warn that exposed Git configuration files and embedded access tokens remain a growing vulnerability for companies using cloud services.<\/p>\n<\/p><\/div>\n","protected":false},"excerpt":{"rendered":"

UK-based education giant Pearson has confirmed a significant cyberattack that exposed sensitive customer data, internal corporate information, and cloud infrastructure, BleepingComputer reported on Thursday. In a statement, Pearson acknowledged the breach, stating that an unauthorized actor had accessed part of their systems and downloaded what the company described as “largely legacy data.” While employee data […]<\/p>\n","protected":false},"author":2,"featured_media":93819,"comment_status":"","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","ast-disable-related-posts":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"fifu_image_url":"https:\/\/i.tribune.com.pk\/media\/images\/news-story-640-x-480-px1746787646-0\/news-story-640-x-480-px1746787646-0.png","fifu_image_alt":"","footnotes":""},"categories":[8],"tags":[],"class_list":["post-93818","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-technology"],"acf":[],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t