Scholastic Corporation, the children's book publisher known for school book fairs and classroom programs, suffered a breach in January 2025 when a hacker identified as "Parasocial" accessed the company's employee portal using credentials stolen via malware. The attacker exfiltrated data linked to approximately 8 million individuals, with 4.2 million unique email addresses confirmed in the breach. Parasocial stated publicly that they had no intention of releasing the data, framing the intrusion as a security demonstration rather than a financially motivated attack. Scholastic confirmed it was investigating the incident. The exposed records included names, email addresses, phone numbers, and physical home addresses belonging to customers and education professionals. Many of the affected accounts belong to parents and teachers, some of whom included school affiliations in their profiles. While no passwords or financial data were included in the exposed fields, the combination of home addresses and school-linked relationships creates a meaningful risk for families. Affected individuals could be targeted through phishing attacks designed to impersonate trusted education channels, or face physical risks tied to the exposure of their home location. No public regulatory action or formal legal proceedings had been announced at the time of this summary. Scholastic's customer base skews heavily toward parents of school-age children and educators, which gives this breach an elevated risk profile even without financial data present. People whose information was exposed should be alert to unsolicited contact that references Scholastic, their child's school, or book fair activity, as these details could be used to craft convincing and targeted scams.

Educational publishers collect student, parent, teacher, school, and order-related identity and contact data across books, subscriptions, classroom programs, and school-commerce workflows.

Scholastic has continued operating its core school-facing publishing and distribution business. The company has navigated changes in educational publishing and school procurement. No major organizational developments beyond the breach have been prominently reported in the most recent period.