Application programming interface (API) bugs in the Edulog Parent Portal platform allowed bad actors to access names and geolocation data of six million K-12 riders, according to researchers. Edulog Parent Portal, a service that provides real-time school bus tracking for parents of grade-school students, has since fixed the vulnerability.

Source: SC Magazine