SchoolBreach.org
BreachesTrendsToolsLearnAbout
Free Security Check
Security Check
SchoolBreach.org

A public resource tracking data breaches in Philippine schools. Helping administrators protect student data through awareness, education, and free security tools.

© 2026 SchoolBreach.org · A community service by OceanEd

Navigate

  • Breaches
  • Trends
  • Tools
  • Learn
  • Methodology

Company

  • About
  • Privacy Policy
  • Terms of Service
  • Contact Us

Disclaimer: This tracker is maintained for educational and awareness purposes. Incidents are documented using threat intelligence monitoring, Philippine media reports, NPC filings, and responsible disclosures. Social media platforms are monitored for leads and are corroborated before publication or naming — never through active scanning or exploitation. Severity ratings and summaries are prepared with AI assistance and reviewed editorially. Full methodology →

SchoolBreach.org

Security & Responsible Disclosure

We take the security of SchoolBreach.org seriously. If you discover a vulnerability, we want to hear from you.

How to Report

Email your findings to security@schoolbreach.org. Please include:

  • A clear description of the vulnerability
  • Steps to reproduce (proof of concept)
  • The potential impact
  • Your name or handle (for acknowledgment, if desired)

We aim to acknowledge valid reports within 3 business days and provide a resolution timeline within 10 business days.

In Scope

  • schoolbreach.org and www.schoolbreach.org
  • API endpoints at schoolbreach.org/api/*
  • Authentication and authorization issues
  • Injection vulnerabilities (XSS, SQLi, SSRF, etc.)
  • Security misconfigurations with a real-world impact
  • Sensitive data exposure

Out of Scope

  • Denial of service attacks
  • Social engineering of SchoolBreach.org staff
  • Reports based on automated scanner output with no demonstrated impact
  • Missing security headers that do not present a real-world risk
  • Issues in third-party services we do not control

Our Commitments

  • We will not pursue legal action against researchers who act in good faith under this policy.
  • We will keep your report confidential unless you agree otherwise.
  • We will credit you in our acknowledgments section once the issue is resolved, if you wish.
  • We will notify you when the reported issue has been fixed.

Acknowledgments

We thank all security researchers who help keep SchoolBreach.org safe. Acknowledged researchers will be listed here once their reported issues are resolved.

No reports yet.