October 30, 2026: The Florida Department of Education said an unauthorised party had accessed a system holding information for the Florida Student Financial Aid website. The site was taken down. Reporting says Social Security numbers were exposed for about 4.9 million people. The breach was first detected on October 19, and the state describes the incident as contained. The catalog entry records the figures and sources.
What happened
According to the department's statement as quoted by The Record, an unauthorised party gained access to a system or database containing company or customer information. The department is working with the Florida Digital Service and the Florida Department of Law Enforcement and reported the incident to the state Attorney General. Other department services may be temporarily disrupted. The department has not described the attacker or the method.
What data was exposed
- Names, addresses and phone numbers.
- Email addresses, gender and dates of birth.
- Social Security numbers.
How many people
The Record's headline gives about 4.9 million. Its text says nearly 5 million. The coverage we reviewed did not quote an exact figure from the state. Earlier reports cited 5 million. Treat the count as approximate until the department publishes its own figure.
Verified and unverified
- Confirmed by the state: unauthorised access, the system involved, the data types above, the notice to the Attorney General, and that the incident is "contained."
- Reported: the detection date (October 19) and the approximate count (4.9 million to nearly 5 million).
- Unverified: who the attacker is; how the access happened; whether the data has been posted or sold; whether the access has fully ended; and whether affected people will be notified individually.
Who may be affected
Anyone who used the Florida Student Financial Aid website and provided these details, including students, borrowers and families.
What to do
- Place a free credit freeze with Equifax, Experian and TransUnion. A freeze stops new credit from being opened in your name.
- Check your credit reports at AnnualCreditReport.com for accounts you do not recognise.
- If you can get an IRS Identity Protection PIN, consider one. It blocks tax fraud that uses your Social Security number.
- Do not give a Social Security number, password or bank details to anyone who contacts you unprompted about this breach. Go to official sites by typing their addresses.
- Watch the department's website for its notice and any free monitoring offer.