Massive data breach affects millions of students in California

A recent cyberattack has compromised the personal information of millions of public school students in California. It is estimated that around 17 million records, spanning three years, have been affected by a data breach involving Educational Testing Service (ETS), a partner of the California Department of Education responsible for managing student data.

The attackers managed to access the Secure File Transfer Protocol (SFTP) system used by ETS, reportedly exploiting a password theft. Over a period of four months, hackers repeatedly accessed files containing sensitive information such as names, addresses, dates of birth, and more, posing a serious risk to student privacy.

Why it matters

This incident underscores the need to strengthen security measures on platforms that manage sensitive data, especially in the educational sector. The exposure of this information can have long-term consequences for those affected, including the risk of identity theft and fraud.

What we know

The breach has been confirmed and affects a significant number of current and former students in California's educational system. While ETS has not provided complete details on the extent of the attack, estimates suggest that millions of records have been compromised.

What is still unclear

The exact number of affected students has yet to be confirmed, as well as the specific measures being taken to mitigate the impact of this breach. Additionally, there are no details on whether steps have been implemented to enhance the security of the system and prevent future incidents.