NeverSkip School Management System 2023 Data Breach
In October 2023, an extensive user authentication database originating from NeverSkip (neverskip.com), a prominent Indian EdTech provider of school enterprise resource planning (ERP) and parent communication solutions, was leaked on underground forums.
Exposed Data Types
5- Usernames
- Phone numbers
- Passwords
- Hashed passwords
- School details
About This Breach
The exposed repository contains 5,051,745 unique user records accumulated between 2019 and 2021. Forensic examination confirms the compromise of full user names, registered mobile phone numbers, MD5 password hashes, temporary access PINs, and critically, plaintext dehashed passwords.
The breach also leaked internal institutional identifiers (school_id) mapping parents and staff to specific schools across India. Because plaintext passwords and active mobile contact numbers were exposed in tandem, affected users face substantial risk of credential stuffing and targeted social engineering.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information