PoinCampus Data Breach (2024)

On November 14, 2024, the South Korean education platform PoinCampus appeared in a fresh data breach listing after an incident that exposed records belonging to 89,000 users. The breach, first catalogued by Have I Been Pwned, confirms that names, email addresses, dates of birth, and a smaller set of phone numbers were published to a popular hacking forum. If you or your children have ever used the platform for tutoring, test preparation, or online courses, your personal details may now be circulating beyond the company’s control.

Reported Details from the Disclosure

The primary listing on Have I Been Pwned states that the PoinCampus breach occurred in 2024 and affects 89,000 unique email addresses. Exposed data includes names, email addresses, dates of birth, and a limited number of phone numbers. The disclosure does not specify the exact attack vector, whether data was encrypted, or if a ransomware group claimed responsibility. It simply confirms the dataset was published to a public hacking forum, making it freely downloadable by anyone who knows where to look.

Why This Matters for You and Your Family

Even though the breach is labeled low severity, the combination of names, dates of birth, emails, and phone numbers creates immediate risks for identity theft and targeted scams. Fraudsters can use your date of birth and name to impersonate you when resetting passwords on other services. Phone numbers enable SMS phishing attacks that look legitimate because they already contain accurate personal details. If your child uses PoinCampus, their name and birth date are now public, which can be paired with gaming usernames or school information to begin doxxing chains that affect the entire household.

November 14, 2024 marks the moment this dataset moved from private hands into open circulation. Once information reaches a hacking forum, it spreads quickly through resale channels and automated scraping tools. Your family cannot assume the exposure will remain obscure.

Doxxing and Identity-Chain Implications

Names paired with dates of birth and phone numbers serve as anchor points for identity chaining. Attackers cross-reference the leaked PoinCampus data against other breaches, social media, and people-search sites to build complete profiles. An email from this breach can reveal your child’s school-related accounts; a phone number can link to family addresses through public records. These chains often lead to gaming account takeovers, where stolen credentials from one service unlock Fortnite, Roblox, or Discord profiles that contain payment methods and private chats. The real damage frequently appears weeks or months later when the initial breach has faded from memory.

What to Do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, then use the cleanup of Warden to remove what you can.
• Rotate any password you ever used on PoinCampus wherever it has been reused, and switch on 2FA through an authenticator app rather than SMS.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure surfaces in hours instead of months.
• Cover the household with DoxxScan family protection that extends to dependents and children’s gaming accounts tied to the same address or parent email.
• Let remediation specialists handle ongoing takedown requests for any personal records that appear on data-broker and people-search sites.

The PoinCampus breach illustrates how even education platforms can become gateways to broader personal exposure. A single leak that seems minor can anchor months of follow-on attacks if left unchecked. By combining immediate credential hygiene with DoxxScan’s continuous monitoring, AI-powered identity-chain mapping, and hands-on remediation by specialists, you and your family gain a practical defense against the cascading risks that now travel with every new breach. Its household coverage also protects children’s gaming accounts that frequently become targets once basic personal data is already public.