Dec 09, 2024, 02:31 PM
A new data leak involves ExKase20, now UPC (Peruvian University of Applied Sciences), considered one of the best universities in the country. However, being one of the best and charging high fees is meaningless if they maintain such a vulnerable system that exposes all of their students' data.
From full names, student codes, personal and university email addresses to personal phone numbers.
In addition to all the photos of his students, I am more specific about the photo of their university ID cards.
_____________________________________________________________________________________________________________
![[Image: mysql-web-upc.png]](https://bf.st/img/00c0f2a30a7f020ae8c3258eff530af3a48d8e56/68747470733a2f2f692e6962622e636f2f5a564743326d322f6d7973716c2d7765622d7570632e706e67)
Photo of a part of the databases (contains student information)
________________________________________________________________________________________________________________________________
________________________________________________________________________________________________________________________________
![[Image: fotos-carnet.png]](https://bf.st/img/e4161381d0a41b5af115cae3521b0b2381b46f29/68747470733a2f2f692e6962622e636f2f6d746834505a312f666f746f732d6361726e65742e706e67)
Photos of the faces of the students that the university asks for to process their university card.
Photos until the period 2025-1
Information:
- More than 25 GB of leaked data
- Year: 2024
- Website: https://www.upc.edu.pe/
Download part of files:
- Student photos and more than 70k student data.
- The total original data weighs 25GB
Link1 --> SQL UPC
Link2 --> university ID photos of students
Link3 --> Download both files
The shepherd is curious, the shepherd sees vulnerabilities and attacks. Those who don’t take risks don’t win, and you, teacher, took a risk and lost... 2+2=3 
