Procurili podaci više od 560 hiljada hrvatskih učenika i nastavnika

The recent exposure of over 560,000 personal records of Croatian students and teachers has sparked significant concern among educators, parents, and cybersecurity experts. The data, which includes names, email addresses, school affiliations, and user roles, was publicly shared on an internet forum, raising alarms about potential breaches in the country’s educational system. According to reports from local media outlets such as *Dnevnik.hr* and *Dnevni avaz*, the breach involves a cryptographically encrypted file containing sensitive information linked to more than 1,452 schools across Croatia. This incident marks one of the largest security incidents in the history of public institutions in the country.

The data, which appears to have been sourced directly from the national education system, contains precise and verifiable entries. Reporters from *Dnevnik.hr* confirmed the authenticity of the data by cross-referencing it with their own children's information, as well as that of colleagues and affiliated schools. The file reportedly holds exactly 563,509 unique entries, each including the full name of the student or teacher, the name of their school, and their official email address, all under the domain *@skole.hr*. Notably, the database includes records of older students but lacks entries for younger ones, suggesting either a partial backup or a specific method of data retrieval that excludes certain age groups.

This anomaly has led cybersecurity professionals to consider two possible explanations for the breach. One theory suggests that the data might have leaked through a connected application that only retrieves active accounts, which are typically used by older students. Another possibility points toward an outdated security backup that includes former generations of students, while the youngest students remain excluded. These findings highlight the complexity of identifying the exact origin of the breach, as the data seems to span multiple years and potentially different systems within the educational infrastructure.

In response to the breach, the Croatian Academic and Research Network (CARNET) issued a statement warning users about increased risks of targeted phishing attacks and other forms of social engineering. While there is currently no indication that the network itself has been compromised, CARNET emphasized the importance of heightened vigilance when receiving unsolicited emails requesting personal information. They also assured the public that there is no immediate need to change passwords unless further investigations reveal vulnerabilities. However, they pledged to keep the public informed through official channels as the investigation progresses.

The incident has raised serious concerns about the safety of personal data, especially given the large number of minors affected. Cybersecurity experts warn that the availability of this information could facilitate identity theft, fraud, and other malicious activities online. Parents and educators alike are now urged to monitor their digital presence and take additional precautions to protect their families and students. As the situation unfolds, the Ministry of Science, Education, and Youth has yet to officially comment on the matter, though ongoing investigations are expected to clarify the extent of the breach and determine responsibility.

With the public now aware of the breach, the focus shifts to how best to mitigate its impact and prevent similar incidents in the future. The involvement of both local media and national research networks underscores the gravity of the issue and the need for coordinated efforts to safeguard educational data. As the investigation continues, the broader implications for data privacy and institutional security will likely shape the discourse around digital safety in Croatia’s educational sector.