ETS Breach Exposes California Student Data, Including Disability Records
California, US
Pexels/Pixabay
What Happened
What Happened
Where Sources Agree
- arrows_inputStudent Data Breach Confirmed: Initial reports confirm a data breach at the Educational Testing Service exposed personal information for millions of California students, with the compromised records including names, birth dates, addresses, and disability status for those enrolled over the past three school years, according to the California Department of Education.
- arrows_inputBreach Timeline Confirmed: Most outlets confirm an unauthorized party used a compromised login credential to access and copy files between May 22 and September 18, with the breach identified on September 25, according to the California Department of Education.
Where Sources Disagree
- arrows_outputScope of Student Data Breach: Reports differ on the total number of students affected by the ETS data breach; some sources state that data for 7 million students was exposed, while others emphasize that 5.7 million students were enrolled in California public schools during the 2025-2026 school year.
- arrows_outputAffected Student Record Timeframe: State official reports state the breach affects students enrolled over the past three school years. However, other reporting indicates the compromised data includes records dating back to 2006 for students who left the state without confirming a transfer.
Timeline
October 16, 2026
Mitigation steps and protections offered: Officials said ETS implemented enhanced monitoring, stronger access controls and third-party reviews while the state offered affected individuals 24 months of identity-protection services; agencies reported no evidence so far that the information has been made public.
October 16, 2026
Public disclosure: millions affected: On October 16, the California Department of Education said a hacker accessed the data of millions of students—including names, birth dates, addresses and disability status—affecting students enrolled across the previous three school years.
October 2, 2026
State notifies districts; processing halted: In an October 2 letter to county and district officials, the California agency said the testing service had stopped normal enrollment data processing and state agencies were working to determine the scope and impact of the incident.
Summary by Ground AI
Sources
See All 23A varied selection of sources chosen by Ground to reflect the diversity of this story’s coverage.
Most Written About
The stories getting the most coverage from the last 24 hours
Timeline
October 16, 2026
Mitigation steps and protections offered: Officials said ETS implemented enhanced monitoring, stronger access controls and third-party reviews while the state offered affected individuals 24 months of identity-protection services; agencies reported no evidence so far that the information has been made public.
October 16, 2026
Public disclosure: millions affected: On October 16, the California Department of Education said a hacker accessed the data of millions of students—including names, birth dates, addresses and disability status—affecting students enrolled across the previous three school years.
October 2, 2026
State notifies districts; processing halted: In an October 2 letter to county and district officials, the California agency said the testing service had stopped normal enrollment data processing and state agencies were working to determine the scope and impact of the incident.
