{
  "id": 12186019,
  "title": "Legacy sign-on service comes back to bite school software provider Bromcom",
  "url": "https://urgent.news/2026/10/05/legacy-sign-on-service-comes-back-to-bite-school-software-provider-12186019",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-10-05T09:30:00.000Z",
  "source": {
    "name": "The Register Science",
    "slug": "the-register-science",
    "url": "https://www.theregister.com/security/2026/10/05/legacy-sign-on-service-comes-back-to-bite-school-software-provider-bromcom/5301156"
  },
  "original_language": "en",
  "account": "UK education software provider Bromcom has informed its customers about a personal data breach affecting its single sign-on (SSO) technology. The incident, discovered on September 6, involved unauthorized access to email addresses and limited information associated with compromised SSO registrations within the company's legacy SSO registration functionality. Bromcom has since withdrawn the legacy functionality from production and is collaborating with external forensic specialists to determine the full extent of the data breach. The affected component did not contain account passwords or authentication tokens, and the incident did not permit access to external accounts like Microsoft or Google. Bromcom, which operates software used in over 5,000 schools and 390 multi-academy trusts in the UK, stated that the compromised service held email addresses associated with SSO registrations, the registration and last sign-in dates, and internal user and registration reference numbers. The company acknowledged that the legacy SSO registration functionality had remained in production due to continued use by an internal system. Bromcom has sought comment from the affected parties.",
  "summary": "Intruders retrieved email addresses from superseded tech kept running for an internal system",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 2,
    "also_reported_by": [
      {
        "outlet": "The Register",
        "title": "Legacy sign-on service comes back to bite school software provider Bromcom",
        "url": "https://urgent.news/2026/10/05/legacy-sign-on-service-comes-back-to-bite-school-software-provider",
        "published": "2026-10-05T09:30:00.000Z"
      }
    ]
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}