Service Update: BellRinger Notice System Security Fix
An exposed development API endpoint allowed unauthorized messages to appear on BellRinger displays at Wentzville Middle School. The issue has been fully resolved.
Earlier today, unauthorized notices appeared on the BellRinger display system at Wentzville Middle School after a development API endpoint used for testing was accidentally left exposed without proper authentication. An outside party exploited the open endpoint to post messages that were not authorized by Blacklink or any BellRinger administrator.
Some messages contained inappropriate language and racial slurs. Blacklink wants to be unequivocal: this content was not created or approved by Blacklink or any school administrator.
The issue has been identified and fully resolved. The endpoint has been secured, authentication has been enforced across the notice system, and access controls have been reviewed to ensure only authorized accounts can post announcements going forward.
Impact: No servers were accessed, no user accounts were compromised, and no sensitive data was exposed. The incident was limited strictly to the display notice system.
Blacklink sincerely apologizes to the students, staff, and administrators at Wentzville Middle School for the disruption and for any offense caused by the content that appeared on displays.