Terms of Service

By accessing or using SchoolBreach.org, you acknowledge that you have read, understood, and agree to be bound by these Terms and our Privacy Policy. If you do not agree to these Terms, you may not access or use our Services.

If you are using SchoolBreach.org on behalf of a school, organization, or other entity, you represent and warrant that you have the authority to bind that entity to these Terms.

SchoolBreach.org is a public resource that tracks and documents cybersecurity incidents affecting Philippine schools, including but not limited to:

• A data breach tracker documenting incidents in K-12 schools and universities
• A Site Scanner tool that performs external checks against school websites, including CMS detection, HTTP header analysis, and compliance checks
• A Trends page providing aggregate analysis of school data breaches over time
• Downloadable policy templates, including a privacy policy template and an incident response plan template
• Educational guides, explainers, and checklists on data protection and cybersecurity
• Recommendations for third-party security tools, including Cloudflare, Bitwarden, KnowBe4, and MXToolbox
• AI-assisted content, including breach severity ratings, summaries, and descriptions prepared with editorial review
• Aggregate statistics and analysis of school data breaches

SchoolBreach.org also operates SchoolBreach Sonar (sonar.schoolbreach.org), an advanced security scanning service governed by its own Terms of Service.

We reserve the right to modify, suspend, or discontinue any aspect of our Services at any time with reasonable notice.

SchoolBreach.org is a publicly accessible website. You may freely browse breach data, use our security tools, and access educational resources without creating an account.

The free Site Scanner performs passive, publicly accessible lookups including DNS queries, HTTP header analysis, and CMS fingerprinting. It does not perform intrusive or authenticated scanning. By using the Site Scanner, you represent that you are permitted to request such publicly available information about the target domain, or that you have authorization from the domain owner to conduct the scan.

If you submit a breach report or inquiry, you agree to provide accurate and truthful information to the best of your knowledge.

The free Site Scanner available on the Tools page performs external, passive checks against school websites. These checks include public DNS lookups, HTTP response header analysis, and CMS fingerprinting based on publicly observable signals. No authenticated access, exploitation, or intrusive probing is performed.

• Scan results are informational only and do not constitute a professional security audit or penetration test.
• Results reflect a point-in-time snapshot and may not capture all security conditions.
• OceanEd Inc. is not liable for any decisions made, actions taken, or damages arising from reliance on Site Scanner results.
• For active, authenticated, or comprehensive scanning, please refer to SchoolBreach Sonar (sonar.schoolbreach.org), which is governed by its own Terms of Service and requires explicit authorization.

You agree NOT to:

• Use the Services for any unlawful purpose or in violation of any applicable laws
• Submit false, misleading, or fabricated breach reports
• Use breach data from this site to harass, extort, or harm affected schools or individuals
• Upload malicious code, viruses, or any harmful content
• Interfere with or disrupt the integrity or performance of the Services
• Attempt to reverse engineer, decompile, or extract source code from our platform
• Use automated systems to scrape, copy, or extract data without permission
• Republish breach data in a way that could identify individuals or put students at risk
• Use the Site Scanner to scan domains you do not own or are not authorized to assess
• Use downloadable templates (privacy policy, incident response plan) in ways that misrepresent OceanEd Inc. or SchoolBreach.org as the author, guarantor, or legal adviser of those documents

• We reserve the right to withhold or redact school names when disclosure could endanger students or ongoing investigations.
• Breach severity ratings are based on available information and may be updated as new details emerge.
• If you believe any information on our tracker is inaccurate, please contact us for correction.

Breach severity ratings, summaries, and descriptions are prepared with AI assistance and reviewed editorially. They reflect our assessment based on available information and should not be treated as definitive findings.

SchoolBreach.org provides educational content including guides, explainers, checklists, and downloadable policy templates. This content is intended for general informational and awareness purposes only.

• Educational content may be updated, revised, or removed at any time without prior notice.
• This content does not replace professional cybersecurity consultation, legal advice, or formal compliance assessment.
• Schools and institutions should engage qualified professionals to assess their specific security and compliance needs.

SchoolBreach.org and its original content, features, and functionality are owned by OceanEd Inc. and are protected by international copyright, trademark, and other intellectual property laws.

• You may not copy, modify, or distribute our platform without written permission.
• The SchoolBreach.org name, logo, and all related trademarks are our exclusive property.
• Breach data published on this site may be referenced with proper attribution to SchoolBreach.org.
• Policy templates and checklists are provided for schools to customize and use internally. They may not be resold or redistributed as standalone products.

• We do not guarantee uninterrupted, secure, or error-free operation of the Services.
• SchoolBreach.org is maintained for educational and awareness purposes and should not be considered legal advice.
• Security tool results are informational only and do not constitute a professional security audit.
• SchoolBreach.org is not associated or affiliated with any hacking group, nor do we perform any hacking activities. We solely gather and present information that is already publicly available on the web.
• We are not liable for indirect, incidental, special, or consequential damages arising from use of our Services.

Policy Templates and Checklists

Policy templates and incident response plans provided on this site are starting points and do not constitute legal advice. Schools should consult with legal counsel and their Data Protection Officer to ensure compliance with Republic Act 10173 (Data Privacy Act of 2012) and other applicable regulations.

Third-Party Tool Recommendations

Recommended third-party tools (including Cloudflare, Bitwarden, KnowBe4, and MXToolbox) are not OceanEd products. We receive no compensation for these recommendations. Their inclusion does not constitute endorsement of their security practices, and their use is governed by their own terms of service and privacy policies.

AI-Assisted Content

Portions of the content on SchoolBreach.org — including breach severity ratings, breach summaries, incident descriptions, and educational materials — are prepared with AI assistance and reviewed editorially. AI-generated content may contain errors or omissions. All such content reflects our assessment based on available information at the time of publication and should not be treated as definitive, authoritative, or legal findings. OceanEd Inc. assumes no liability for inaccuracies introduced through AI-assisted processes.

You agree to indemnify, defend, and hold harmless OceanEd Inc., its officers, directors, employees, and agents from any claims, damages, losses, or expenses arising from:

• Your use of the Services
• Your violation of these Terms
• Your violation of any rights of another party
• Your failure to comply with applicable laws or regulations

• These Terms are governed by the laws of the Republic of the Philippines.
• Any disputes shall be resolved through good-faith negotiation first.
• If negotiation fails, disputes shall be submitted to arbitration in Metro Manila.
• The language of arbitration shall be English or Filipino.

We reserve the right to modify these Terms at any time. We will notify you of material changes by:

• Posting the updated Terms on our website
• Displaying a notice on the site

Your continued use of the Services after changes take effect constitutes acceptance of the new Terms.

If you have any questions about these Terms of Service, please contact us: