Bromcom Reports Data Breach Affecting UK Education SSO System UK-based education software provider Bromcom has disclosed a data breach impacting its single sign-on (SSO) technology, exposing limited personal information. The incident, detected on September 6, involved unauthorized access to the company’s Communication Server environment, specifically a legacy SSO registration feature. Affected data includes email addresses, SSO registration details (such as linked Microsoft or Google accounts), and internal user reference numbers. Bromcom confirmed that passwords, authentication tokens, and its core school Management Information System (MIS) remained secure. The company has since disabled the vulnerable legacy functionality and is working with forensic specialists to assess the full scope of the breach. The incident underscores persistent security risks in educational technology, even when primary data systems remain uncompromised. No further details on the attack vector or potential threat actors have been released.