437,000 South African MySchool student records offered on DarkForums

Overview

On 2 April 2026, a DarkForums user offered a dataset described as containing 437,000 records from myschool.co.za, a South African platform handling student contact and enrollment information. The post describes the data as covering contacts, student enrollments and support tickets.

What was published

The seller lists three sections: core contact and personal information for prospective and enrolled students, enrollment records, and support tickets. Fields include name, email, landline and mobile phone, birth date, gender, ethnicity, nationality, preferred language and marketing consent. The dataset is presented as fresh and organized for analysis.

Risks for affected individuals

• Student and family contact details can be used for phishing around school enrollment periods.
• Birth dates combined with names increase the risk of identity fraud.

What remains unknown

• Whether the records cover current or historical students.
• The download size and the seller's ability to deliver the full dataset.
• Whether financial or health information is included.

What affected people should do

Families whose details appear in the leak should be cautious with unsolicited messages referencing their children's school enrollment. The platform should verify the exposure and notify affected users.