Back in August, I was contacted by one of a few researchers who often alert me to leaks or data dumps they are finding. In this case, I cannot credit the researcher, because by now, I don’t remember who it was, and when I recently asked a few of them, “Was this your research?” they can’t remember either. My note-taking clearly failed me on this, but what was clear at the time was that they had found thousands and thousands of children’s and parents’ records from the schoolcountry.com site.

https://www.databreaches.net/are-indian-firms-too-lax-in-data-security-and-in-responding-to-breach-notices/