Personal Data for Millions of California Students Stolen in Massive Breach
Millions of current and former students at California's public school have had their data stolen — including names, date of birth, and addresses — stolen in a breach, reports the Los Angeles Times. The breach affects students "who took the state's mandated standardized tests that annually assess their academic proficiency, education officials announced Friday." The compromised information affects…
A massive data breach has exposed personal information for millions of former and current California students, with details including their names, dates of birth and residential addresses, according to the Los Angeles Times. The breach, which affects students who took the state's annual standardized tests from 2006 to 2023, extends beyond the 5.7 million students currently enrolled in California public schools.
Educational Testing Service (ETS), the nonprofit responsible for providing test participation and assessment data, was the victim of the security breach. Affected individuals, including adults who were once students, are entitled to 24 months of complimentary identity-protection services if their identities are compromised as a result of the breach.
Parents and guardians of children under 16 might consider requesting a credit freeze to fortify their children's financial security. The incident stemmed from a compromised login credential, utilized between May 22 and September 18, 2026, to access and copy sensitive student data. Anton Dahbura, the executive director of the Johns Hopkins University Information Security Institute, expressed concern over the incident, stating that a single stolen login credential should not provide unauthorized access to such a vast amount of personal information.
He questioned why authentication safeguards, access restrictions and monitoring systems failed to detect and prevent the unauthorized activity. ETS spokesperson confirmed that they have since strengthened their security measures, including access controls, monitoring and third-party review of their security practices.
Written by urgent.news from Slashdot's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
