Testing Company Data Breach Affects Millions of Calif. Students

GovTech reports that the data breach involved Educational Testing Service or ETS, which provides extensive services to California.[1] The outlet says the breach affects many more than the state's current 5.7 million public-school students as the breach dates back to 2023 enrollments.[1]According to KION Central Coast, on Sept. 25, ETS found unauthorized activity involving a secure file transfer protocol site used to exchange California statewide assessment information[2] with the state education department.Education Week reports that the California Department of Education said "an unauthorized party used a compromised login credential" to copy files containing California student information at various times between May 22 and September 18, 2026[3].CBS San Francisco reports that officials said the exposed data may include Disability and Section 504 status, eligibility for certain programs[4] and assessment results. The outlet adds that officials said Social Security numbers, drivers license numbers, financial account information or account passwords were not compromised.[4]CBS also reports that so far, ETS has not found evidence of the data being made public[4], and that ETS is providing complimentary identity protection services through Experian IdentityWorks for two years.[4]According to LAist, the state education department is reviewing whether ETS complied with data security and requirements included in its contract with the state.[5]Anton Dahbura of Johns Hopkins University told Education Week that "a stolen login credential should not become a months-long passport to millions of students' personal records."[3]