Millions of students caught in California data breach

What happened: Hackers used a compromised login credential to access an ETS-operated secure file transfer site and copied sensitive records of millions of current and former California public school students. Key numbers: Files were copied at various times between May 22 and Sept. 18, 2026. ETS discovered the activity on Sept. 25. Why it matters: The stolen data includes home addresses, birth dates and disability details, and affected people may now live anywhere in the U.S. State officials are reviewing ETS's compliance with data security requirements and contractual obligations.

Hackers used a compromised login credential to access an ETS-operated secure file transfer site and copied sensitive records of millions of current and former California public school students.

The stolen data includes home addresses, birth dates and disability details, and affected people may now live anywhere in the U.S. State officials are reviewing ETS's compliance with data security requirements and contractual obligations.