Found an institutional coaching centre leaking 1000s of students personal data phone, photo, db, parents info, documents photo path, payment method(bank, check, card) etc. They 32567 rows. I'm trying to find the admin login page. It seems they have it on separate subdomain. I found student login and I can login as any student. I hate these institutes. Sent them emails days ago (29 sept) but no reply yet. What should I do?

  • 5
    Depending on where you live, shit like this may even violate some laws.
    Use good anonymising-tech, document what you found and send it anonymously to the police.
  • 0
    @metamourge I sent them issue on the contact page. Used a vps to send that email.
Your Job Suck?
Get a Better Job
Add Comment