Cybersecurity researcher Jeremiah Fowler discovered an unprotected database containing 3,154,239 records linked to PrepHero, a platform that helps high school athletes secure college sports scholarships.
The 135 GB database was not password-protected or encrypted and included names, emails, phone numbers, addresses, passport data, and even links to passport images of student-athletes. It also exposed the contact details of parents and college coaches.
A folder labeled “mail cache” held 10 GB of emails from 2017–2025, some containing login credentials, payment info, and coach evaluations of athletes.
Fowler responsibly reported the breach to PrepHero, and the database was secured the same day. However, it’s unclear how long the data was exposed or whether anyone else accessed it.
If this article helped you, please consider supporting our work. Every small contribution keeps Abijita.com independent and running.
