< Back to all clusters
[TECHNOLOGY] · United States · 10 sources

started · updated

California student data breach affects millions

A massive data breach has compromised the personal information of millions of California public school students. The breach targeted the Educational Testing Service (ETS), a nonprofit organization contracted by the state to administer standardized assessments.

According to the California Department of Education, an unauthorized party used a compromised login credential to access an ETS-operated secure file transfer protocol (SFTP) site. The intrusion occurred in multiple instances between May 22 and September 18, 2026. The breach affects students enrolled during the previous three school years, potentially impacting millions of individuals.

The stolen data includes names, dates of birth, home addresses, demographic information, and disability status. However, officials confirmed that Social Security numbers, financial account information, and passwords were not accessed.

ETS has taken the affected SFTP site offline and is developing a new site with enhanced security controls. The organization is also implementing additional safeguards, including strengthened access controls and increased monitoring. Affected families are being notified, and some former students may be eligible for identity-protection services.

Entities

California · California Department of Education · Educational Testing Service · Johns Hopkins University Information Security Institute · Pasadena Unified School District

Claims

What the coverage asserts, and how many sources carry each claim.