Active Network activenetwork.com Active Network data breach: what happened and what to do
Active Network told the California Attorney General in December 2019 about unauthorized activity on its Blue Bear school payments platform between October 1 and November 13, 2019. Press reports of the notice say names, card details and Blue Bear logins were exposed, but not Social Security numbers.
View all 13,177 breaches- Breach date
- Oct 2019
- Data exposed
- Names, Credit cards, Usernames, Passwords
- Last updated
Reviewed by Anthon Wansland
Head of Product & Co-Founder
Serus is a privacy company with paid tools to find and remove your personal data. This page is free and based on official sources.
What happened
Active Network, LLC runs Blue Bear, software that schools and school districts use for online payments. In a notice filed with the California Attorney General on December 30, 2019, the company reported unauthorized activity on the Blue Bear platform between October 1 and November 13, 2019.
The people at risk were parents and others who paid school fees or bought books and materials through a Blue Bear web store during that window. News coverage in early January 2020 repeated the company's account.
Sources checked: scworld.com, securityaffairs.com, oag.ca.gov
Last verified against the official page:
What was exposed
As reported from the notice, the data could include names, payment card details (including the expiration date and security code) and Blue Bear account usernames and passwords. The company said Social Security numbers and government ID numbers were not accessed.
Card details and logins are different risks. A card number with its security code can be used for charges until the card is replaced. A reused Blue Bear password can be tried on other accounts, which is why password reuse is the real danger here.
What the sources don't say
Active Network has not published a total number of people affected, so none is stated. The facts above come from the California Attorney General listing and press reports of the company's notice.
What to do if you were in it
- 1
Replace the card you used
If you paid through a Blue Bear school store between October 1 and November 13, 2019, ask your card issuer for a new card number and check statements for charges you don't recognize. Under U.S. law you can dispute unauthorized card charges.
- 2
Change your Blue Bear password and any reuse of it
Set a unique password on the Blue Bear account. Then change it anywhere else you used the same or a similar password, and turn on two-factor login where it's offered.
- 3
Expect phishing that mentions the breach
Messages about your child's school account or payments may be fake. Don't click links or call numbers in unexpected messages. Go to the company's own website instead, and report scams at ReportFraud.ftc.gov.
- 4
Report misuse and watch your reports
Check your credit reports at annualcreditreport.com. If someone uses your details, report it at IdentityTheft.gov to get a recovery plan.
- 5
Check whether your email or phone is in other breaches
A free Serus scan checks breach databases for your email address and phone number, so you know what else is out there. Serus can't remove breach data, but it alerts you when your details turn up and tells you what to do.
Official filings
- California Attorney General , filed 30 Dec 2019
Timeline
-
The breach happened
-
Reported to the California Attorney General
Frequently asked
Was I affected by the Active Network breach?
You may have been if you paid through a Blue Bear school store between October 1 and November 13, 2019. Active Network notified the people it identified.
Were Social Security numbers exposed?
The company said Social Security numbers and government ID numbers were not accessed.
What should I do if I reused my Blue Bear password?
Change it everywhere you used it, use a unique password for each account and turn on two-factor login.
Do I need a credit freeze?
The reported data was card and login details, not identity numbers, so a freeze is optional here. Replacing the card and changing passwords matter more.
Sources
Something wrong or out of date? Tell us and we'll re-check it.
