INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).

Summit Public Schools Data Breach Exposes 115 GB of Student

| 2026-10-28 17:55 CRITICAL LOW DATA BREACH
JSON
Executive Summary
AI-generated
A hacker has leaked 115 GB of Summit Public Schools data containing billions of lines, student and staff personal records on a hacking forum. The leak includes names, home addresses, birth dates, phone numbers, parents details, school records, and approximately 21,000 email addresses from California and Washington schools operated by Summit Public Schools. The attack appears to be a social engineering breach that exploited vulnerabilities in the organization's cloud environment, allowing the hacker to access sensitive information without authentication. As of October 28, 2026, the leaked data remains publicly available on PwnForums, with an estimated total size of 115 GB and containing billions of lines, including personal records, historical school documents, student account fields, and alumni information.
Technical Mitigations AI-generated
• Account Use Policies (ATT&CK mitigation for Social Engineering): Adds verification for helpdesk resets, approvals, and app consents commonly targeted by impersonation. • Audit (ATT&CK mitigation for Social Engineering): Enables correlation of email/identity/SaaS/endpoint activity that appears legitimate. • Reset credentials and API keys that may have been exposed, and review access logs for the affected accounts or integrations.
Technical Observables 4 IoCs Login Required
Indicators of Compromise (IoCs) Protected

Raw threat telemetry, malicious IP addresses, file hashes, and direct VirusTotal correlation are restricted to authenticated users.

Sign In to View 4 IoCs Create Free Account
files 4
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
ShinyHuntersShinyHunters
Target & Sectors
FIVE_EYES FIVE_EYES educationeducation
Incident Timeline
‎September 2025
ShinyHunters hackers breached the Salesforce environment of Instructure in September 2025 through social engineering.
tactic Social Engineering
Previously, ShinyHunters hackers breached the Salesforce environment of Instructure , the company behind the Canvas learning management system used by schools and universities worldwide, through social engineering in September 2025.
threat_actor ShinyHunters
Previously, ShinyHunters hackers breached the Salesforce environment of Instructure , the company behind the Canvas learning management system used by schools and universities worldwide, through social engineering in September 2025.
‎May 2026
Canvas experienced a breach in May 2026 involving its Free-for-Teacher environment, which was unrelated to the Summit Public Schools data exposure.
organisation Canvas
A separate Canvas breach in May 2026 involved its Free-for-Teacher environment, not a Salesforce flaw.
organisation Summit
No connection between those incidents and the Summit release has been identified.
‎October 22, 2026
Threat actors posted approximately 115 GB of stolen student and staff data, including email addresses, on PwnForums.
industry Education
General Document Context
organisation PwnForums
The files appeared on PwnForums on October 22, 2026, posted by an account using the name Sp1d3yG0nz4l3s .
data_breach 15.82 GB
Within the California PowerSchool folder, TEACHERS.csv and USERS.csv are listed at 15.82 GB and 8.06 GB.
data_breach 8.06 GB
Within the California PowerSchool folder, TEACHERS.csv and USERS.csv are listed at 15.82 GB and 8.06 GB.
data_breach 115 GB
Hackread.com’s review puts the available files at 115 GB and identified approximately 21,000 email addresses.
organisation PowerSchool
PowerSchool, Clever and Salesforce Exports Included The collection is divided into folders labelled POWERSCHOOL_CA , POWERSCHOOL_WA , CLEVER and SALESFORCE_SUMMITPSALUMNI .
data_breach 100 GB
The account claimed to have breached the organisation’s cloud environment and described the release as approximately 100 GB, saying it was part of a larger collection.
‎October 22
Threat actors posted a PwnForums thread claiming a Summit Public Schools breach and sharing files for download on October 22.
‎2026/10/28
A hacker leaked 115 GB of Summit Public Schools data containing personal records and email addresses.
organisation Khan Academy Lexia Core5 PowerUp
Its largest file, STUDENTS.csv , is 35.12 GB, followed by PERSON.csv at 13.89 GB, while student and teacher exports in the Clever directory are organised under six education-service names, including: Khan Academy Lexia Core5 PowerUp MyLexia Newsela NWEA ST Math The files also include alumni account and contact records in a Salesforce folder, with the two exports measuring 46…
organisation MyLexia Newsela
Its largest file, STUDENTS.csv , is 35.12 GB, followed by PERSON.csv at 13.89 GB, while student and teacher exports in the Clever directory are organised under six education-service names, including: Khan Academy Lexia Core5 PowerUp MyLexia Newsela NWEA ST Math The files also include alumni account and contact records in a Salesforce folder, with the two exports measuring 46…
organisation NWEA
Its largest file, STUDENTS.csv , is 35.12 GB, followed by PERSON.csv at 13.89 GB, while student and teacher exports in the Clever directory are organised under six education-service names, including: Khan Academy Lexia Core5 PowerUp MyLexia Newsela NWEA ST Math The files also include alumni account and contact records in a Salesforce folder, with the two exports measuring 46…
organisation Salesforce
Its largest file, STUDENTS.csv , is 35.12 GB, followed by PERSON.csv at 13.89 GB, while student and teacher exports in the Clever directory are organised under six education-service names, including: Khan Academy Lexia Core5 PowerUp MyLexia Newsela NWEA ST Math The files also include alumni account and contact records in a Salesforce folder, with the two exports measuring 46…
organisation MB
Its largest file, STUDENTS.csv , is 35.12 GB, followed by PERSON.csv at 13.89 GB, while student and teacher exports in the Clever directory are organised under six education-service names, including: Khan Academy Lexia Core5 PowerUp MyLexia Newsela NWEA ST Math The files also include alumni account and contact records in a Salesforce folder, with the two exports measuring 46…
data_breach 35.12 GB
Its largest file, STUDENTS.csv , is 35.12 GB, followed by PERSON.csv at 13.89 GB, while student and teacher exports in the Clever directory are organised under six education-service names, including: Khan Academy Lexia Core5 PowerUp MyLexia Newsela NWEA ST Math The files also include alumni account and contact records in a Salesforce folder, with the two exports measuring 46…
data_breach 13.89 GB
Its largest file, STUDENTS.csv , is 35.12 GB, followed by PERSON.csv at 13.89 GB, while student and teacher exports in the Clever directory are organised under six education-service names, including: Khan Academy Lexia Core5 PowerUp MyLexia Newsela NWEA ST Math The files also include alumni account and contact records in a Salesforce folder, with the two exports measuring 46…
data_breach 46.90 MB
Its largest file, STUDENTS.csv , is 35.12 GB, followed by PERSON.csv at 13.89 GB, while student and teacher exports in the Clever directory are organised under six education-service names, including: Khan Academy Lexia Core5 PowerUp MyLexia Newsela NWEA ST Math The files also include alumni account and contact records in a Salesforce folder, with the two exports measuring 46…
data_breach 92.68 MB
Its largest file, STUDENTS.csv , is 35.12 GB, followed by PERSON.csv at 13.89 GB, while student and teacher exports in the Clever directory are organised under six education-service names, including: Khan Academy Lexia Core5 PowerUp MyLexia Newsela NWEA ST Math The files also include alumni account and contact records in a Salesforce folder, with the two exports measuring 46…
organisation Summit Public Schools Breach
Summit Public Schools Breach Exposes 115 GB of Student and Staff Data.
organisation Student and Staff Data
Summit Public Schools Breach Exposes 115 GB of Student and Staff Data.
data_breach 115 GB
Summit Public Schools Breach Exposes 115 GB of Student and Staff Data.
A hacker has leaked 115 GB of Summit Public Schools data containing billions of lines, student and staff personal records and approximately 21,000 email addresses.
Names, home addresses, birth dates, phone numbers, parents details and school records of thousands of students and teachers are among the 115 GB of Summit Public Schools data published on a hacking forum.
organisation Summit Public Schools
A hacker has leaked 115 GB of Summit Public Schools data containing billions of lines, student and staff personal records and approximately 21,000 email addresses.
organisation Names
Names, home addresses, birth dates, phone numbers, parents details and school records of thousands of students and teachers are among the 115 GB of Summit Public Schools data published on a hacking forum.
organisation Hackread.com
Hackread.com examined the collection and verified that it contains personal information associated with the school network, including historical records and student account fields.
Tactical Metrics
Metrics
data_breach
16
Gb
Within the California PowerSchool folder, TEACHERS.csv and USERS.csv are listed at 15.82 GB and 8.06 GB.
Metrics
data_breach
8
Gb
Within the California PowerSchool folder, TEACHERS.csv and USERS.csv are listed at 15.82 GB and 8.06 GB.
Metrics
data_breach
35
Gb
Its largest file, STUDENTS.csv , is 35.12 GB, followed by PERSON.csv at 13.89 GB, while student and teacher exports in the Clever directory are organised under six education-service names, including: Khan Academy Lexia Core5 PowerUp MyLexia Newsela NWEA ST Math The files also include alumni account and contact records in a Salesforce folder, with the two exports measuring 46…
Metrics
data_breach
14
Gb
Its largest file, STUDENTS.csv , is 35.12 GB, followed by PERSON.csv at 13.89 GB, while student and teacher exports in the Clever directory are organised under six education-service names, including: Khan Academy Lexia Core5 PowerUp MyLexia Newsela NWEA ST Math The files also include alumni account and contact records in a Salesforce folder, with the two exports measuring 46…
Metrics
data_breach
47
Mb
Its largest file, STUDENTS.csv , is 35.12 GB, followed by PERSON.csv at 13.89 GB, while student and teacher exports in the Clever directory are organised under six education-service names, including: Khan Academy Lexia Core5 PowerUp MyLexia Newsela NWEA ST Math The files also include alumni account and contact records in a Salesforce folder, with the two exports measuring 46…
Metrics
data_breach
93
Mb
Its largest file, STUDENTS.csv , is 35.12 GB, followed by PERSON.csv at 13.89 GB, while student and teacher exports in the Clever directory are organised under six education-service names, including: Khan Academy Lexia Core5 PowerUp MyLexia Newsela NWEA ST Math The files also include alumni account and contact records in a Salesforce folder, with the two exports measuring 46…
Metrics
data_breach
115
Gb
Summit Public Schools Breach Exposes 115 GB of Student and Staff Data.
A hacker has leaked 115 GB of Summit Public Schools data containing billions of lines, student and staff personal records and approximately 21,000 email addresses.
Names, home addresses, birth dates, phone numbers, parents details and school records of thousands of students and teachers are among the 115 GB of Summit Public Schools data published on a hacking forum.
Hackread.com’s review puts the available files at 115 GB and identified approximately 21,000 email addresses.
Metrics
data_breach
100
Gb
The account claimed to have breached the organisation’s cloud environment and described the release as approximately 100 GB, saying it was part of a larger collection.
Intelligence Sources
HackRead 2026-10-28