Cyber Threat Actor: $2a$45

The threat actorknown by the alias $2a$45 has been associated with a data exposure involving Leon County Schools and Florida Virtual School. The actor’s location is reported as Russia. In the incident, the actor posted plaintext records from a third‑party vendor’s unsecured server on a public forum, claiming the exposure resulted from a vendor error rather than a hack. The posted data included Social Security numbers, addresses, contact details, academic information, vaccination histories, disciplinary reports, and parent data for hundreds of thousands of students and thousands of teachers and staff. The actor explicitly stated that no monetary compensation or bug bounty was sought and offered to help the affected organizations secure the vulnerability.

The actor’s activity did not involve malware, custom tools, or sophisticated intrusion techniques; instead, the access was gained through a misconfigured server that allowed unauthenticated downloading of the data. No specific malware families, exploit kits, or command‑and‑control infrastructure were referenced in the reporting. The actor has not been linked to any state‑sponsored group, criminal consortium, or other threat‑actor affiliation in publicly available sources. The most notable publicly reported operation linked to $2a$45 remains the Leon County Schools vendor data leak, which exposed approximately 368,000 current and former students and over 4,000 teachers and staff, with the data remaining accessible for an extended period before being disclosed. The actor first appeared in the forum in February 2018, where they released a subset of the data and indicated they could share more if interest persisted.