--- title: UStrive security lapse exposed personal data of its... description: UStrive, an online mentoring platform for students, exposed personal data of at least 238,000 users through a vulnerable GraphQL endpoint. The security flaw... canonical: https://daily.dev/posts/ustrive-security-lapse-exposed-personal-data-of-its-users-including-children-zyqyqoybz twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: UStrive security lapse exposed personal data of its users, including children | daily.dev og:description: UStrive, an online mentoring platform for students, exposed personal data of at least 238,000 users through a vulnerable GraphQL endpoint. The security flaw... og:url: https://daily.dev/posts/ustrive-security-lapse-exposed-personal-data-of-its-users-including-children-zyqyqoybz og:image: https://api.daily.dev/og/posts/ZYqYqOyBz.png og:image:alt: UStrive security lapse exposed personal data of its users, including children og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # UStrive security lapse exposed personal data of its users, including children **[TechCrunch](https://daily.dev/sources/tc)** · 3 min read · 0 upvotes · 0 comments ## Summary UStrive, an online mentoring platform for students, exposed personal data of at least 238,000 users through a vulnerable GraphQL endpoint. The security flaw allowed any logged-in user to access full names, email addresses, phone numbers, dates of birth, and other private information by examining network traffic. The nonprofit fixed the issue after TechCrunch's notification but declined to commit to alerting affected users, citing ongoing litigation with a former software engineer. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [Bug in student admissions website exposed children’s personal information](https://daily.dev/posts/bug-in-student-admissions-website-exposed-children-s-personal-information-hghnpmivs) · TechCrunch · 1 upvotes · 0 comments - [Betterment breach scope pegged at 1.4M users](https://daily.dev/posts/betterment-breach-scope-pegged-at-1-4m-users-y8majqbox) · The Register · 0 upvotes · 0 comments - [I found a Vulnerability. They found a Lawyer.](https://daily.dev/posts/i-found-a-vulnerability-they-found-a-lawyer--8i04jlej6) · Hacker News · 0 upvotes · 0 comments - [Prosper Marketplace Data Breach Expands: 17.6 Million Users Impacted in Database Intrusion](https://daily.dev/posts/prosper-marketplace-data-breach-expands-17-6-million-users-impacted-in-database-intrusion-ijgqbjan3) · Security Boulevard · 0 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#cyber](https://daily.dev/tags/cyber), [#aws](https://daily.dev/tags/aws), [#data-privacy](https://daily.dev/tags/data-privacy), [#graphql](https://daily.dev/tags/graphql) [View this post on daily.dev](https://daily.dev/posts/ustrive-security-lapse-exposed-personal-data-of-its-users-including-children-zyqyqoybz) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"UStrive security lapse exposed personal data of its users, including children","url":"https://daily.dev/posts/ustrive-security-lapse-exposed-personal-data-of-its-users-including-children-zyqyqoybz","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/ustrive-security-lapse-exposed-personal-data-of-its-users-including-children-zyqyqoybz"},"datePublished":"2026-01-20T20:48:37.734Z","dateModified":"2026-01-20T20:49:02.435Z","description":"UStrive, an online mentoring platform for students, exposed personal data of at least 238,000 users through a vulnerable GraphQL endpoint. The security flaw...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/bc22d6b675fcebffaea8d5952f376c1b?_a=AQAEulh","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/bc22d6b675fcebffaea8d5952f376c1b?_a=AQAEulh","isAccessibleForFree":true,"articleSection":"TechCrunch","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"TechCrunch","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/tc","url":"https://daily.dev/sources/tc"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/ustrive-security-lapse-exposed-personal-data-of-its-users-including-children-zyqyqoybz","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,cyber,aws,data-privacy,graphql","timeRequired":"PT3M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"TechCrunch","item":"https://daily.dev/sources/tc"},{"@type":"ListItem","position":3,"name":"UStrive security lapse exposed personal data of its users, including children"}]} ```