One Compromised Login Exposed Millions of California Students’ Records
Personal information on current and former California public school students was copied from a file transfer system belonging to Educational Testing Service (ETS), according to the California Department of Education (CDE).
ETS is a nonprofit that handles state and federally mandated testing under a contract with the state. The organization supports California’s CAASPP and ELPAC assessment programs and relied on a secure file transfer protocol (SFTP) site to share testing data with CDE.
The organization spotted unauthorized activity on the site on September 25, but the earliest access dates back to late May.
“The investigation determined that an unauthorized party used a compromised login credential at various times during the period from May 22, 2026 to September 18, 2026 to access the SFTP site to copy files containing California student information,” according to the CDE’s breach notice.
No victim count has been provided, but the notice says, “Information about...
Copyright of this story solely belongs to www.securityweek.com. To see the full text click HERE
