Millions of CA Student Records Stolen by Hackers

Sensitive personal records belonging to millions of current and former California public school students were accessed and copied by hackers. The breach, involving the Educational Testing Service (ETS), compromised data including home addresses, birth dates, disability details, and student identification numbers. Investigators determined an unauthorized individual used a compromised login credential to access an ETS-operated file transfer site between May 22 and September 18, 2026. ETS discovered the suspicious activity on September 25, 2026, and has since implemented stronger security controls.

This data breach has a broad scope, potentially affecting individuals who attended California public schools in prior years, even if they no longer reside in the state. Records from as far back as 2006 may be involved for former students whose transfers were not confirmed. ETS began notifying affected students and families on October 16, 2026, and is offering 24 months of free identity theft protection services, with an enrollment deadline of March 19, 2027.

Authorities are investigating ETS's compliance with data security requirements. While there is currently no evidence the stolen information has been publicly released, the unauthorized access poses a significant privacy risk. Affected individuals are advised to verify notifications, consider identity theft protection, and potentially freeze their child's credit. Families should also monitor for suspicious school-related communications and review their child's school district's data retention policies.