🚨Bromcom SSO Breach Exposes Email Addresses
Emails and SSO data exposed in Bromcom breach
TL;DR
Bromcom's SSO technology suffered a data breach, exposing email addresses and limited SSO registration info. The company's MIS system remains unaffected, and forensic specialists are investigating.
Bromcom's single sign-on (SSO) technology faced a data breach, exposing email addresses and limited information from SSO registrations. The breach occurred in the legacy SSO registration functionality of the Communication Server environment, which was still in use despite being superseded. The incident did not affect account passwords or authentication tokens, and Bromcom's school Management Information System (MIS) remained secure. The breach was identified on September 6, 2026, and the company is working with external forensic specialists to determine the full extent of the data involved. This affects more than 5,000 schools and 390 multi-academy trusts using Bromcom's software.
Key Points
Bromcom's SSO technology suffered a data breach on September 6, 2026, exposing email addresses and limited SSO registration info.
The affected component did not hold account passwords or authentication tokens, limiting the breach's impact.
Bromcom's school Management Information System (MIS) was not compromised, ensuring continued data security for schools.
The company's software is used by over 5,000 schools and 390 multi-academy trusts in the UK education sector.
Bromcom is working with external forensic specialists to determine the full extent of the data involved in the breach.
Why It Matters
If you're using Bromcom's SSO technology, your email addresses and limited SSO registration info may have been exposed. The company's school MIS system remains unaffected, but forensic specialists are working to determine the full scope of the breach. This impacts over 5,000 schools and 390 multi-academy trusts in the UK.
Comments
Be the first to comment
Enjoyed this article?
Get it daily. 7am. Free. Reads in 5 minutes.
Join 3,569 builders reading daily.