California Student Records Exposed in Data Breach

Families with students enrolled since 2023 should watch for notification letters regarding compromised personal data.

Updated on Oct. 30, 2026 in Special Education

Flat opaque gouache-painted illustration of blank filing folders and a mailbox, evoking the quiet impact of a student data privacy breach.
The California Department of Education confirmed that a 2026 data breach exposed sensitive student records for families enrolled in state schools since 2023. AI Illustration. Upload story photo >

Live Poll

Do you trust that your state's education system adequately secures your family's personal data?

The California Department of Education has confirmed that personal student records were accessed in a recent data breach discovered on September 25, 2026. Affected files include data for students enrolled in the state since 2023.

Why it matters

This breach exposes sensitive student information, potentially impacting family privacy and security for those enrolled in California schools. ETS is preparing to notify affected individuals by mail to address the unauthorized exposure of their personal records.

The incident involved unauthorized access to student records for individuals enrolled in California schools from 2023 onward. While the exact count of impacted students remains unknown, the breach covers a multi-year enrollment period.

The players

California Department of Education

The state agency responsible for overseeing public education and protecting student records in California.

ETS

The educational testing organization involved in the processing of student records and the notification process for those impacted by the breach.

The details

The unauthorized access occurred between May 22 and September 18, 2026, after an unauthorized entity gained entry using a compromised login credential. Once inside the system, the entity copied files containing names, dates of birth, addresses, school districts, grade levels, demographic data, program eligibility status, disability status, and testing accommodation details.

Timeline

  1. 2023: Enrollment period covered by the affected data begins.

  2. May 22, 2026: Unauthorized access to the system begins.

  3. September 18, 2026: The unauthorized access period ends.

  4. September 25, 2026: ETS discovers the unauthorized activity.

The Home Front

This incident highlights the ongoing challenges of securing student data against unauthorized access in an increasingly digitized state education system. It serves as a reminder of the notification obligations required under privacy regulations when student information is compromised.

Families with students enrolled in California schools since 2023 should watch their mail for official notification letters from ETS. Parents should also monitor their students' identity information and review school-related correspondence for guidance on next steps.

The takeaway

The data breach affects students enrolled in California since 2023 and encompasses a wide range of sensitive personal and program information. Families should watch for official mail and consider proactive measures like monitoring their student's records for any suspicious activity.

Further reading

For resources related to securing student records, visit the Special Education section.

More information

For more details, read the official information on protecting student information.

Source note: This article includes information reported by YourCentralValley.

Live Poll

Do you trust that your state's education system adequately secures your family's personal data?