The TOOT Science Breach: 2,466 Exposed Records Just Went Public

In June 2024, HEROIC found 2,466 email addresses and usernames from TOOT Science exposed on a Telegram channel. The data came from a Chinese educational platform offering STEM science courses for children through offline classes, online modules, and branded kits.

Why the TOOT Science Breach Is Dangerous

Exposed email addresses and usernames allow attackers to identify platform users and target them with phishing emails impersonating TOOT Science or related educational services. Parents who registered accounts for their children are at risk of social engineering attacks crafted around children's educational accounts and subscription services.

What Was Exposed in the TOOT Science Leak

• Email addresses
• Usernames

Why This TOOT Science Data Puts You at Risk

Email addresses from education platforms are frequently used in credential stuffing attacks when paired with commonly used passwords, and they serve as direct targets for phishing. If a parent or student reused their TOOT Science username as a password on other services, attackers who correlate both fields across breach datasets can gain an advantage in unauthorized access attempts.

How a Database Breach Works

A database breach occurs when attackers gain unauthorized access to an organization's stored records and extract user data. In the TOOT Science incident, the data appeared on Telegram, a common distribution channel for stolen datasets. Even without password data, email addresses and usernames provide a foundation for targeted attacks against affected users and their families.

Check If Your Data Was Exposed

HEROIC operates one of the world's largest breach databases, covering more than 400 billion leaked records. Use HEROIC's free breach scanner to check if your email address or credentials appeared in the TOOT Science leak or thousands of other breaches in our database.