Active Network - management of school accounting faces security breach

Active Network is a US-based company that provides web-based school accounting software for K-12 schools and districts. It is a software that facilitates administration and management of school accounting, student fees, and online stores on behalf of schools and other educational institutions. But recently it has faced a security breach. They have also announced that the hackers have taken complete control over Blue Bear.

The Active Network has informed the users that the people who ever used the blue bear website either to pay school fees or buy books and school supplies between October 1, 2019 and November 13, 2019, might have had their personal data stolen by hackers. The collected data may contain information like name, payment card number, payment card expiration date, payment card security code, and store username and password.

As per the research team of Active Network this type of attack appears to be a web skimming (Magecart) attack. A Tulsa-based law firm is currently conducting an investigation into the breach, and asking impacted victims to come forward, in the hopes of filing a class-action lawsuit.