Hack exposes data on millions of California students
- A compromised login credential allowed a digital snoop to swipe files containing names, addresses, and even disability statuses of all 7 million California public school students from 2021 to 2024.
- The heist ran from May 22 to Sept. 18, and the Educational Testing Service (ETS) only realized its server had been looted on Sept. 25—a full week after the crime spree ended.
- Your kid's standardized test scores might be mediocre, but at least some identity thief now thinks they're worth a fortune on the dark web.
- State officials sent out the panic emails on Friday, because nothing says 'secure your future' like ruining your weekend with a data-breach notification.
Brief Summary
In a stunning display of cybersecurity that would make a 1990s AOL hacker blush, the non-profit Educational Testing Service (ETS) got its digital pockets picked. The culprit used a single compromised login credential to make off with terabytes of data on Golden State students, including names, addresses, and—because why not?—their disability statuses. The absolute punchline? They didn't notice the break-in until a week after it ended, proving once again that the 'Smarter Balanced' test is a lie when it comes to network defense.
Why This Matters
This breach isn't just a headache for the state's IT department; it's a life sentence of spam calls and phishing emails for your kids. That data is a gift-wrapped present for identity thieves, who can use it to open credit cards, file fraudulent tax returns, or socially engineer their way into even more sensitive accounts. Your family is now playing a decades-long game of whack-a-mole with financial fraud, and you didn't even sign up for it.