What Happened
In January 2023, iD Tech, a technology education company providing coding camps and online courses for children, suffered a data breach affecting nearly 1 million user records. The breach exposed 415,000 unique email addresses along with names, dates of birth, and passwords stored in plaintext. The compromised data was posted to a hacking forum in February 2023, but iD Tech failed to publicly acknowledge the breach or directly notify affected parents and users, instead remaining silent for weeks. Many affected families only learned of the breach through third-party data breach notification services like Have I Been Pwned or Firefox security alerts in early March 2023. When contacted by media, iD Tech’s CEO declined to explain the company’s lack of communication and refused to provide evidence of notifications allegedly sent to account holders.
