An app used in hundreds of Quebec schools and daycares has been taken offline after a major security flaw was discovered. On Tuesday, Radio-Canada reported that a cybersecurity expert was able to easily access confidential information from parents using the HopHop app. The Laval-based platform allows parents to coordinate pick-ups with schools and daycare centres so children can be ready when they arrive. In a statement on its website, HopHop said it suspended access to its server and app as a precaution following the media report. “We are working closely with the Ministère de la Cybersécurité et du Numérique to correct the identified vulnerability and conduct resilience testing,” the company wrote. “The HopHop application will only be restored once we have received the government’s analysis report and recommendations.” The company added that its own server analysis showed no signs that data had been stolen. “However, the vulnerability incident occurred between October 3 and October 7, 2025,” HopHop said. “The data that may have been accessed includes parents’ names, photos, phone numbers and email addresses, as well as the names of their children and the school they attend.” Cybersecurity expert Patrick Mathieu, who is also a parent and user of the app, told CTV News the incident was a wake-up call. “I’m not putting the fault on HopHop for this, but in general, most companies don’t invest enough in security, and they put our information at risk,” he said. “I think that’s the wake-up call we all need to hear.” Quebec’s Education Ministry said it is ultimately the responsibility of schools and daycares to ensure the apps they use comply with privacy laws.
