Entourage Yearbooks

Entourage Yearbooks, operating under the alias Entourage, provides Creator Studio Pro, a yearbook software platform designed for educational institutions. The platform enables schools and their partners to upload, organize, and design raw student photographs for inclusion in printed yearbooks. Creator Studio Pro is used by third‑party providers such as Edge Imaging to deliver yearbook services to school districts across the United States. The company’s headquarters is located in the United States of America, indicating a domestic focus for its development and support operations. Through its software, Entourage handles the ingestion of image files that may contain device‑generated metadata, although it does not retain personal identifiers such as names or school information as part of its core offering. The service is positioned within the niche market of educational publishing technology, catering specifically to the yearbook production workflow.

The February 2024 ransomware incident highlighted several distinguishing attributes of Entourage Yearbooks’ operational model. The attack originated from compromised developer credentials that allowed threat actors to access a Canadian AWS cloud server hosting Creator Studio Pro, demonstrating the company’s reliance on cloud infrastructure and remote development access. In response, Entourage isolated the affected server, rotated credentials, imposed stricter developer access controls, and engaged third‑party security auditors to assess and harden the environment. The organization negotiated with the attackers to recover the compromised raw student photos and obtained confirmation that the files were deleted and not disseminated, reflecting a crisis‑management approach that prioritizes data recovery and verification. Following the breach, Entourage directed affected schools to re‑upload their yearbook images while confirming, through its partner Edge Imaging, that the partner’s internal systems remained uncompromised. These actions underscore Entourage’s focus on rapid incident containment, credential hygiene, and external validation as part of its security posture.