INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).

Florida Student Aid Website Hacked via Phishing Attack on Users

| 2026-11-02 14:44 CRITICAL LOW DATA BREACH
JSON
Executive Summary
AI-generated
On October 19, the Florida Department of Education (FLDOE) discovered a breach on its student financial aid website, potentially exposing the personal information of roughly 4.9 million people. The attackers may have accessed names, Social Security numbers, dates of birth, home addresses, phone numbers, email addresses, and gender codes. FLDOE has not disclosed how the attackers got in or who is responsible for the extortion group ShinyHunters claiming to have stolen more than 200,000 driver records from a related incident at the Florida Department of Highway Safety and Motor Vehicles. The breach may impact individuals who applied for financial aid in the state in the past. FLDOE has contained the breach but some websites and online services may be disrupted as remediation continues; students' existing aid is safe.
Technical Mitigations AI-generated
• Reset credentials and API keys that may have been exposed, and review access logs for the affected accounts or integrations.
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
ShinyHuntersShinyHunters
Target & Sectors
Global Scope educationeducation
Incident Timeline
‎2026/11/02
Threat actors, identified as ShinyHunters, used compromised credentials belonging to a local police department user to breach the Florida Department of Education's student financial aid website.
threat_actor ShinyHunters
That agency confirmed hackers had accessed its driver database after the ShinyHunters extortion group claimed to have stolen more than 200,000 driver records.
FLHSMV traced the intrusion to compromised credentials belonging to a local police department user but did not name ShinyHunters.
data_breach 200,000 driver records
That agency confirmed hackers had accessed its driver database after the ShinyHunters extortion group claimed to have stolen more than 200,000 driver records.
organisation FLHSMV
FLHSMV traced the intrusion to compromised credentials belonging to a local police department user but did not name ShinyHunters.
organisation Revolve Data Breach Impacts
Related : Revolve Data Breach Impacts at Least 180,000 People Related : Chainalysis Discloses Data Breach Following AI-Driven Cyberattack Related : Polymarket Returns $3.9 Million to Traders as DebugBear Cites DNS Hijack
financial $3.9 Million
Related : Revolve Data Breach Impacts at Least 180,000 People Related : Chainalysis Discloses Data Breach Following AI-Driven Cyberattack Related : Polymarket Returns $3.9 Million to Traders as DebugBear Cites DNS Hijack
organisation The Florida Department of Education
The Florida Department of Education (FLDOE) says hackers breached its student financial aid website, potentially exposing the personal information of roughly 4.9 million people.
organisation FLDOE
The Florida Department of Education (FLDOE) says hackers breached its student financial aid website, potentially exposing the personal information of roughly 4.9 million people.
organisation the Florida Student Financial Aid
“At this time, we believe the incident was limited to the Florida Student Financial Aid website (FloridaStudentFinancialAidSG.org) and may have impacted approximately 4.9 million individuals,” the department said.
organisation Names
Names, Social Security numbers, dates of birth, home addresses, phone numbers, email addresses, and gender codes are among the data types the attackers may have accessed.
organisation The Florida Digital Service
The Florida Digital Service and the Florida Department of Law Enforcement are assisting with the response.
organisation the Florida Department of Law Enforcement
The Florida Digital Service and the Florida Department of Law Enforcement are assisting with the response.
Tactical Metrics
Metrics
data_breach
200,000
Driver Records
That agency confirmed hackers had accessed its driver database after the ShinyHunters extortion group claimed to have stolen more than 200,000 driver records.
Metrics
financial
$3.9M
Financial Impact
Related : Revolve Data Breach Impacts at Least 180,000 People Related : Chainalysis Discloses Data Breach Following AI-Driven Cyberattack Related : Polymarket Returns $3.9 Million to Traders as DebugBear Cites DNS Hijack
Intelligence Sources
SecurityWeek 2026-11-02