California students' sensitive data stolen in massive breach incident

| 2026-10-19 11:10 HIGH LOW DATA BREACH

JSON

Executive Summary

Highlight CTI
AI-generated

A breach occurred at Educational Testing Service (ETS) in California, USA between May 22 and September 18, 2026. The nonprofit organization, which helps run the state's standardized tests under contract with the California Department of Education, had an unauthorized party access and copy student information from a secure file transfer protocol site. Over 5.7 million students were enrolled in California public schools during the affected period, although not all categories of information exposed to each individual. The stolen files can reveal highly personal education and disability-related information, including names, dates of birth, home addresses, demographic data, statewide assessment scores, and SSIDs. An investigation found that compromised login details were used by an unauthorized party to access the site; ETS has notified affected students and families, offering two years of free identity-protection services.

Technical Mitigations AI-generated

• Patch ETS SFTP site vulnerabilities to prevent unauthorized access • Monitor for suspicious activity related to the compromised login details used in the breach • Block or hunt for Social Security numbers, financial account information, passwords, and parent or guardian information on dark web marketplaces

Intelligence Metadata

Actors / Malware / CVEs / Campaigns

Target & Sectors

NORTH_AMERICA education

Incident Timeline

‎between May 22 and September 18

An unauthorized party used compromised login details to access the site and copy files containing California student information between May 22 and September 18.

‎2026/10/19

Threat actors used malware to target a system operated by Educational Testing Service (ETS), resulting in the theft of sensitive data belonging to millions of current and former California public school students.

Click on any entity below to view its context and source!

organisation the Malwarebytes Student Protection Program

Here’s what you need to know. ” Pro tip: Students, faculty, and staff at participating US universities can get free security software through the Malwarebytes Student Protection Program .

Malware Bytes

organisation Educational Testing Service

Personal information belonging to millions of current and former California public school students has been stolen from a system operated by Educational Testing Service (ETS).

Malware Bytes

organisation the California Department of Education

ETS is a nonprofit organization that helps run the state’s standardized tests under contract with the California Department of Education (CDE).

Malware Bytes

organisation CDE

ETS is a nonprofit organization that helps run the state’s standardized tests under contract with the California Department of Education (CDE).

Malware Bytes

organisation ETS

CDE is distributing the ETS breach notice to help affected individuals receive information about the incident and available resources.

Malware Bytes

organisation Social Security

CDE says Social Security numbers , financial account information, passwords, and parent or guardian information were not involved.

Malware Bytes

organisation Identity Theft Protection

Malwarebytes Identity Theft Protection monitors for all of it, alerts you fast, and comes with identity theft insurance.

Malware Bytes

‎2025–2026 school year alone

Threat actors exploited vulnerabilities to steal sensitive data, including student names and SSIDs, from California public schools.

Click on any entity below to view its context and source!

organisation Statewide Student Identifiers

The information involved varies by individual but may include: Student names Statewide Student Identifiers (SSIDs) Dates of birth Home addresses Demographic information Disability and program participation information Statewide assessment information, including test scores According to the CDE, over 5.7 million students were enrolled in California public schools during the 2025–2026 school year…

Malware Bytes

organisation Disability

Malware Bytes

general_metric 5.7 students

Malware Bytes