Scrum.org

Profile narrative

Scrum.org, also known as the Scrum Certification and Training Site, is a United States-based organisation that operates in the professional training and certification sector, with a particular focus on the Scrum framework for agile project management. The organisation provides certification programmes and training resources aimed at practitioners, teams, and organisations seeking to adopt or deepen their use of Scrum methodologies. Its scope centres on the dissemination of Scrum knowledge through structured curricula, assessments, and credentialing, serving a global audience of professionals engaged in software development, product delivery, and broader agile transformation initiatives. The organisation's brand is closely associated with the Scrum framework itself, positioning it as a dedicated authority within the agile certification market rather than a generalist training provider.

The organisation's public footprint is reflected in its recognition as a well-known certification body within the agile community, though specific metrics regarding its size, user base, or geographic reach are not provided in the available material. What is documented is its operating presence in the United States and its role as a holder of user data pertaining to certified professionals, including records such as certification histories, test scores, and profile photographs, as became apparent through its publicly disclosed security incident. This indicates that the organisation maintains a substantive database of certified individuals, sufficient to attract attention from threat actors seeking to exploit personal information associated with professional credentials.

Among Scrum.org's distinguishing attributes is its specialist positioning within a defined methodological niche. Unlike broader IT certification bodies covering multiple disciplines, Scrum.org is specifically oriented around the Scrum framework, suggesting a concentrated competency in agile principles and practices. The organisation's exposure to a targeted breach involving a fraudulent administrator account and mail server configuration changes indicates that it operates standard web infrastructure for the delivery of its services, including user account management, email communications, and online assessments. Its handling of the 2016 incident, including transparent communication about the types of data potentially exposed, reflects a documented approach to incident response, though the organisation itself emphasised that no financial data was compromised and no confirmed evidence of data exfiltration or subsequent misuse was identified.

Regarding structural details, the available material does not specify Scrum.org's ownership structure, parent company, or subsidiary relationships. It is identified as an independent operating entity within the United States, with the alias "Scrum Certification and Training Site" suggesting its principal function rather than any corporate hierarchy. No information is provided regarding its legal form, founding date, or executive leadership. The organisation's documented history in the available sources is limited to its operational presence and the single disclosed security incident of May 2016, in which a vulnerability in third-party software was identified as the contributing factor shortly after the initial detection of unauthorised access.

Incidents

1 incident linked to this organisation.