● Covered by 2 sources · 2 reportsMedium impact1 negative1 neutral
Compromised Login Exposes Millions of California Student Records from ETS System
Key points
- ETS SFTP site accessed via compromised login credential.
- Student data exposed from May 22 to September 18, 2026.
- Impacts millions of California students, current and former.
- Exposed data includes names, addresses, IDs, and academic details.
Unauthorized Access to Student Data
The California Department of Education (CDE) reported that personal information belonging to current and former California public school students was copied from a file transfer system operated by Educational Testing Service (ETS). ETS, a nonprofit contractor for state and federal testing programs, uses this system to share testing data with the CDE.
Breach Details and Timeline
ETS detected unauthorized activity on its secure file transfer protocol (SFTP) site on September 25, 2026. An investigation revealed that a compromised login credential was used to access the site multiple times between May 22, 2026, and September 18, 2026, to copy files containing student information. The method by which the login credential was compromised and the identity of the attacker have not been disclosed.
Scope of Impacted Students and Data
While a precise victim count is unavailable, the CDE stated that information for all students enrolled in the three previous school years was accessed and copied. This includes over 5.7 million students enrolled in 2025-2026 alone, with the potential to affect students who left California schools as far back as 2006. The exposed data includes student names, birth dates, home addresses, school and district information, state and local ID numbers, gender, race/ethnicity, primary language, country of origin, English learner status, disability status, testing accommodations, and test results. Social Security numbers, passwords, financial details, and parent/guardian information were not compromised.
ETS Response and Remediation
Following the discovery, ETS shut down the compromised account and took the SFTP site offline. The organization is developing a replacement site with enhanced security measures to prevent future incidents. The CDE and ETS are working with law enforcement on the matter.
✨ This summary was generated by AI from the outlets' reporting listed below. It is not independently verified and may contain errors — check the original sources. How BrevFeed works →
The daily brief
One email each morning: the day's tech stories, clustered across outlets and summarized. No account needed.
One email a day. Unsubscribe in one click, any time.
Today's brief
Spend a few minutes, get the whole day. Every topic's top stories in one hands-free rundown — listen, watch, or read the transcript.
▶ Play today's brief
New every morning, and the back catalogue is archived by date.
How outlets covered it
A cyberattack on Educational Testing Service (ETS), a contractor for the California Department of Education (CDE), exposed sensitive data for all public school students enrolled over the last three years. The breach, occurring between May and September, included personal details, academic information, and demographic data for millions of students.
A single compromised login credential allowed unauthorized access to an Educational Testing Service (ETS) SFTP site, exposing personal information for millions of current and former California public school students. The breach, active from May to September 2026, impacts students enrolled in the last three school years and some dating back to 2006, necessitating a system overhaul by ETS.