Pearson
On a school or workplace learning platform, the institution bought the system and you were never the customer, so deletion is its call and a request to the vendor is usually sent back to it. The main record stays long after you have gone, with no period named.
Reported incidents
Customer data taken after a leaked developer token opened its systems
2025-05-08Affected Developer environment and cloud systems
Pearson, the education publisher and exam company, confirmed that attackers had taken data from its systems, which it described as "largely legacy data". BleepingComputer reported that the attackers got in during January 2025 through a GitLab access token left in a public configuration file, then used credentials found in source code to reach cloud systems, taking customer data, support tickets and source code. Pearson said employee data was not affected. It did not say how many customers were affected or whether they would be told.
People affected typically ask Pearson to confirm whether their information was included, and which categories.
The verified route
DÆTRAX is a personal data accountability ledger: a dated record of which companies hold your personal data, what you asked them to do about it, and what they claimed in reply.