INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).

California Department of Education Exposed Student Data in Massive Hack

| 2026-10-17 16:19 HIGH LOW DATA BREACH
JSON
Executive Summary
AI-generated
A hack of a non-profit organization that contracts with the California Department of Education exposed personal information about 7 million students enrolled in California public schools over the past three school years. The breach, attributed to an "unauthorized party" who used a compromised login credential between May 22 and September 18, targeted the Education Testing Service, which administers standardized tests for across the U.S and globally. The data stolen includes names, addresses, demographic information, and disability status of all students affected. Officials from the California Department of Education announced the breach on October 17, stating that it was a result of unauthorized access to files containing student data.
Technical Mitigations AI-generated
• Reset credentials and API keys that may have been exposed, and review access logs for the affected accounts or integrations.
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
Target & Sectors
Global Scope educationeducation
Incident Timeline
‎May 22 and Sept. 18
An unauthorized party used a compromised login credential to copy files containing the student data between May 22 and September 18.
‎2026/10/17
Threat actors successfully breached the Education Testing Service, exposing sensitive data on millions of California students.
organisation Hack
Hack exposes data on millions of California students.
organisation Department of Education
Eric He and Tyler Katzenberger report: Personal information about millions of California students was stolen in a hack of a non-profit organization that contracts with the state’s Department of Education, officials announced Friday.
organisation CDE
The names, addresses, demographic information and disability status of all 7 million students enrolled in California public schools over the past three school years were exposed in the breach, the CDE said.
organisation Education Testing Service
The hack targeted the Education Testing Service , which administers standardized tests for across the U.S and globally.
Intelligence Sources
Data Breaches 2026-10-17