started · updated
California student data breach affects millions
A massive data breach has compromised the personal information of millions of California public school students. The breach targeted the Educational Testing Service (ETS), a nonprofit organization contracted by the state to administer standardized assessments.
According to the California Department of Education, an unauthorized party used a compromised login credential to access an ETS-operated secure file transfer protocol (SFTP) site. The intrusion occurred in multiple instances between May 22 and September 18, 2026. The breach affects students enrolled during the previous three school years, potentially impacting millions of individuals.
The stolen data includes names, dates of birth, home addresses, demographic information, and disability status. However, officials confirmed that Social Security numbers, financial account information, and passwords were not accessed.
ETS has taken the affected SFTP site offline and is developing a new site with enhanced security controls. The organization is also implementing additional safeguards, including strengthened access controls and increased monitoring. Affected families are being notified, and some former students may be eligible for identity-protection services.
Entities
California · California Department of Education · Educational Testing Service · Johns Hopkins University Information Security Institute · Pasadena Unified School District
Claims
What the coverage asserts, and how many sources carry each claim.
- [● 7 SOURCES] The breach occurred via a compromised login credential used to access an ETS-operated secure file transfer protocol (SFTP) site. offthepress.com · srnnews.com · news.slashdot.org · www.epochtimes.com · kulturegeek.fr · +2 more
- [● 3 SOURCES] ETS has taken the affected SFTP site offline and is building a new site with enhanced security controls. offthepress.com · srnnews.com · www.epochtimes.com
- [● 6 SOURCES] Social Security numbers, financial information, and passwords were not compromised in the breach. trn.mk · offthepress.com · srnnews.com · www.epochtimes.com · vijesti.hrt.hr · +1 more
- [● 8 SOURCES] Exposed data includes names, dates of birth, home addresses, demographic information, and disability status. trn.mk · offthepress.com · srnnews.com · news.slashdot.org · www.epochtimes.com · +3 more
- [● 9 SOURCES] A hacker accessed the personal data of millions of students enrolled in California public schools over the last three school years. trn.mk · offthepress.com · srnnews.com · news.slashdot.org · www.coloradoboulevard.net · +4 more
- [○ 1 SOURCE] Affected former students may be eligible for 24 months of free identity-protection services. news.slashdot.org
- [● 8 SOURCES] The unauthorized access occurred between May 22 and September 18, 2026. trn.mk · offthepress.com · srnnews.com · news.slashdot.org · www.epochtimes.com · +3 more
- [● 4 SOURCES] There is currently no evidence that the stolen data has been made public or offered on illegal forums. trn.mk · srnnews.com · vijesti.hrt.hr · www.index.hr