Entourage

Profile narrative

Entourage, headquartered in Canada, operates under the alias Entourage. The organisation provides a software platform known as Creator Studio Pro. Creator Studio Pro is designed for the creation and management of school yearbooks. The platform enables educational institutions to upload, organise, and edit photographic content for yearbook production. Entourage’s services are directed toward schools and related educational organisations that produce annual yearbooks.

On February 5, 2024, Entourage experienced a ransomware attack that compromised its Creator Studio Pro platform. The breach originated from stolen developer credentials used to access an Amazon Web Services server located in Canada. Attackers exfiltrated raw image files that had been uploaded to the platform over a two‑year period. No personally identifiable student information or yearbook text templates were accessed during the incident. Depending on the upload sources, limited metadata such as geolocation may have been present in the exfiltrated files. After negotiations facilitated by cybersecurity advisors, the threat actors returned all Canadian‑based photo files and provided assurances of deletion. Independent web‑monitoring services confirmed that the stolen images were not distributed publicly. In response, Entourage decommissioned the affected server, rotated credentials, restricted developer access, and conducted security audits to prevent recurrence. Edge Imaging, whose own systems remained unaffected, coordinated breach notifications with school boards and assisted affected institutions in reconstructing their yearbooks.

Incidents

1 incident linked to this organisation.