California Student Data Breach Exposes Millions
Tap title to read story
Hackers stole names, addresses, and disability records of millions of California public‑school students who took state‑mandated tests. The breach, uncovered on September twenty‑five, involved Educational Testing Service, the nonprofit that manages California’s standardized testing. Data from enrollments dating back to two thousand and twenty‑three, and even earlier for former students, were accessed between May twenty‑two and September eighteen, two thousand and twenty‑six. The compromised files included demographic details, test participation, and eligibility for federal programs, but did not contain Social Security numbers or financial information.
State education officials, led by Deputy Superintendent Mary Nicely, are coordinating with agencies to assess the scope and impact. While no evidence exists that the data have been released publicly, experts warn that a single compromised credential could grant prolonged access to millions of records. The incident underscores the need for stronger authentication safeguards in educational data systems.
Timeline
- 2023 — California enrolls millions in public schools for standardized testing
- On May 22 2026 Unauthorized access begins to California student data.
- On September 18 2026 Hackers stop copying student records from ETS.
- On September 25 2026 ETS discovers data breach and initiates investigation.
- On October 16 2026 Public notice released by California Department of Education.
Sources
JQJO Editorial Desk · Human reviewed · AI assisted. Report a correction.















