Creator Studio Pro

Profile narrative

Creator Studio Pro is a third-party yearbook software provider that supports schools in producing yearbooks by offering a platform for uploading, managing, and processing photographs. The service operates in the education sector, supplying software infrastructure that schools rely on to coordinate and assemble yearbook content, with underlying cloud infrastructure reportedly hosted on an Amazon Web Services (AWS) environment. Through this platform, schools submit raw photo files which are then handled and prepared for inclusion in finished yearbook products. As a vendor within the school photography supply chain, the organisation sits between individual educational institutions and downstream yearbook producers, providing the technical means for image handling that schools themselves generally do not maintain. Its market footprint is not detailed in available material beyond its identifiable role as a Canadian-based service implicated in operations serving school clients.

The publicly documented scale of the organisation is limited, with no published figures regarding employee count, user base, or revenue. What is established from incident reporting is that the platform was entrusted with raw photo files from multiple schools during a recent yearbook production cycle, and that the operator maintained cloud-hosted infrastructure on a Canadian AWS server for development purposes. The organisation does not appear to be publicly described as a large enterprise, and its distinguishing characteristics stem more from the niche role it plays as a specialist software vendor to the education sector than from any documented market dominance or regulatory authority.

A notable structural and security event surfaced in February 2024, when it was reported that Creator Studio Pro experienced a ransomware attack following the compromise of a developer credential on its Canadian AWS server. The incident resulted in the removal of raw photo files that had been uploaded by schools for recent yearbooks. Importantly, the attacker did not gain access to personal identifiers such as student names, grades, or school details, suggesting the platform's stored data was limited in scope to image files rather than broader personal information. The affected files were later recovered, with a commitment from the threat actor that the data had been deleted and not shared with third parties. In response to the incident, the organisation took the compromised server offline, rotated credentials, removed developer access, and engaged a security audit intended to strengthen protections. Notifications were issued to affected school boards, privacy commissioners, and law enforcement, indicating that the organisation operated within a regulatory environment requiring such disclosures in the Canadian education context.

Public reporting on the organisation has primarily been produced through communications issued by affected school boards and their photography partner, rather than through Creator Studio Pro's own public channels, and the source material does not describe the organisation's ownership structure, parent company, or any subsidiary relationships. There is no indication in available reporting that Creator Studio Pro serves a regulatory function or holds any sector authority; its role is operational, providing a software service to schools for the management of yearbook photography. The distinguishing attributes that can be drawn from documented evidence are its specialisation in yearbook production software, its use of Canadian cloud infrastructure, and its engagement with formal security and notification processes following the 2024 incident.

Incidents

1 incident linked to this organisation.