Amizone (Amity) Breach Exposes 14,439 Plaintext Passwords

This report covers a database tied to Amizone, the student portal used for enrollment and records at Amity, dated April 14, 2026. HEROIC analysts confirmed 14,439 records inside it, each containing an email address, username, first and last name, and a plaintext password. The data was taken directly from the portal's own systems rather than assembled from scattered older leaks. The only way to know if you're affected is to scan your email.

Why a Student Portal Breach Still Puts Accounts at Risk

Every password in this file is stored as plain, readable text, meaning there's no cracking step between the leak and an attacker trying it on the matching account. Combined with a username and real name, that's enough to log in directly and to impersonate the account holder convincingly.

What Was Exposed in the Amizone Records

• Email Address: gives attackers a working inbox to target with phishing or to use as a login.
• Username: identifies the specific account tied to each record for direct login attempts.
• First Name: adds personal detail that makes phishing messages look more convincing.
• Last Name: combined with other fields, helps confirm identity for impersonation attempts.
• Plaintext Password: readable immediately, letting an attacker log in without cracking anything.

Why This Goes Beyond the Student Portal Itself

If any of these passwords were reused on personal email or other accounts, those are exposed too. A hijacked student account can also be used to intercept academic records or impersonate the student in communications with the school.

How This Kind of Database Leak Happens

A database breach occurs when records are pulled directly from a service's own systems rather than pieced together from older leaks. Once copied, the data gets distributed through channels like Telegram, where it can be used for direct logins or further targeting.

How to Respond to the Amizone Leak

Start by scanning your email to see if your details appear in this file. Change your Amizone password immediately, along with any other account using the same password, and watch for emails or messages impersonating the school. This applies to personal and work email alike.