Inside the WooStudy Database: How 21,311 Student Records Were Stolen

HEROIC found the WooStudy database breach dated January 1, 2024, exposing 21,311 records including email addresses, phone numbers, first names, last names, gender information, and birthdates from WooStudy, a Moroccan edtech platform connecting students with universities.

Why the WooStudy Breach Is Dangerous

Attackers holding this dataset can impersonate WooStudy or academic institutions, using real student names, phone numbers, and birthdates to craft convincing phishing messages targeting university admissions, financial aid, or scholarship programs.

What Was Exposed in the WooStudy Leak

• Email Address
• Phone Number
• First Name
• Last Name
• Gender
• Birthday

Why This WooStudy Data Puts You at Risk

The combination of birthdates, real names, and contact information exposed in the WooStudy breach creates ideal conditions for identity theft, targeted phishing, and social engineering attacks. Students in this dataset face particular risk because these credentials can be used for credential stuffing across academic platforms, banking apps, and social networks where password reuse is common.

How Database Breaches Work

A database breach occurs when attackers gain unauthorized access to a company's stored records, typically through vulnerabilities in web applications, misconfigured database permissions, or compromised administrative credentials. Once inside, the attacker can export entire user tables in minutes. The stolen data is then published or sold on underground forums where other criminals can acquire and exploit it.

Check If Your Data Was Exposed

HEROIC operates one of the world's largest breach databases, covering more than 400 billion leaked records. Use HEROIC's free breach scanner to check if your email address or credentials appeared in the WooStudy leak or thousands of other breaches in our database.