2026 Educational Testing Service (ETS) — compromised login used to copy California student records from an SFTP site
Data compromised
Student information that varies by person and may include name, date of birth, residential address, school, district and grade level; statewide student identifier and local student identifier; gender, race or ethnicity, and primary language.
Technical writeup
The AG listing records the notice under the California Department of Education. The letter is issued by ETS at the direction of CDE to California students and families. ETS is a nonprofit testing organisation under contract with the state for statewide assessments, including CAASPP. The notice says law enforcement was notified. Count not stated. recordsAffected 0.
Root cause
An unauthorised party used a compromised login credential at various times between May 22, 2026 and September 18, 2026 to access an ETS secure file transfer (SFTP) site used to exchange California statewide assessment information with the California Department of Education. ETS identified the activity on September 25, 2026.