ExamSoft continues to say that the reports circulating from users who’ve found passwords compromised or credit cards stolen in recent days have nothing to do with their platform. Given the vendor’s prior statement that it was targeted by a sophisticated cyberattack the last time it ran an online bar exam, most applicants aren’t all that reassured.
And they’ll find themselves less comfortable if they didn’t already realize that ExamSoft partner ProctorU suffered a 440,000 user data breach that the company confirmed last month. Which officially makes the much criticized online LSAT the second worst news for ProctorU this year.
There are, of course, many different plans for the upcoming online bar exams across the country and applicants using the ExamSoft system may not have any data sent to ProctorU. And ProctorU claims the breach was from 2014 — though BleepingComputer analyzed the data and found matches from as late as 2017.
But that’s not really the point, is it? The point is that the company that keeps telling applicants and state licensing authorities that it’s got an ironclad system has gotten clipped by a cyberattack, received multiple reports of possibly compromised systems, and had its trusted business partner admit to a major data breach. And through all of this, ExamSoft refuses to submit to a full-scale stress test and, recklessly, state supreme courts are going along with this.
Enough is enough. If there’s really going to be a bar exam next month, we need to see a coordinated test right now to start providing comfort that this won’t be an epic disaster. To borrow from an online commenter — a test where they may get their ID stolen and then fail because they sneezed and broke eye contact with the webcam is now almost as attractive an option as an in-person superspreader event. That’s stress that they don’t need right now.
Earlier: ExamSoft Responds To Multiple Reports That Software Compromises Security
Everyone: Maybe We Should Test This Bar Exam Software; State Supreme Court: LOL, No.
Joe Patrice is a senior editor at Above the Law and co-host of Thinking Like A Lawyer. Feel free to email any tips, questions, or comments. Follow him on Twitter if you’re interested in law, politics, and a healthy dose of college sports news. Joe also serves as a Managing Director at RPN Executive Search.