2026 ETS — California K-12 student data breach; 7M records exposed
Data compromised
Student names, birthdates, addresses, disability records, student IDs, demographics, grade levels, school/district names, language, country of origin, English learner status
Technical writeup
Unauthorized access to SFTP server via compromised credential from May 22 - Sept 18, 2026. Attacker accessed student database containing 7M records spanning back to 2006. Breach discovered Sept 25, 2026. SFTP site taken offline.
Root cause
Compromised SFTP login credential used to access student database; unauthorized access May 22 - Sept 18, 2026.