Strauss Borrelli PLLC, a leading data breach law firm, is investigating PrepHero LLC, which does business as PrepHero, regarding its recent cybersecurity incident. The PrepHero cybersecurity incident may impact the privacy of sensitive personal information belonging to an undetermined number of individuals.
ABOUT PREPHERO, LLC:
PrepHero is an organization that helps high school athletes be recruited for college sports. Founded in 2011, PrepHero works with students and their families to create recruiting resumes as well as start communicating with prospective college coaches.2 Of the top recruited high school athletes, PrepHero has assisted over 90%.3 Headquartered in Chicago, Illinois, PrepHero employs over 10 individuals.
WHAT HAPPENED?
Recently, it was reported by an online source that PrepHero had experienced a cybersecurity incident impacting the privacy of its data. According to this source, a cybersecurity researcher discovered a non-password-protected database that contained millions of records belonging to PrepHero.1 The exposed database contained 3,154,239 records totaling 135 GB in size.1 In addition to documents including names, contact information, and student passport data and images, the database contained a folder named “mail cache” that had 10 GB of email messages that range from 2017 to 2025.1 As well as messages with contact information, the emails contained details about compensation or reimbursement, account emails and login credentials, and audio files from coaches evaluating student performance. The name of the database as well as the documents inside it indicated that the records belonged to PrepHero.1
According to the source, after discovering the database the researcher notified PrepHero of the exposure. The database was restricted from public access the same day.1 As of May 22, 2025, PrepHero has not publicly acknowledged the data exposure or confirmed whether the incident resulted in a data breach.
If you received a breach notification letter from PrepHero, LLC:
We would like to speak with you about your rights and potential legal remedies in response to this data breach. Please fill out the form, below, or contact us at 872.263.1100 or sam@straussborrelli.com.
