ETS data breach: records of millions of California students copied
Reported: Educational Testing Service (ETS) ETS (Company)
Compiled by ScamMarketCap from public recordsHappened Oct 16, 2026United States
- —
- No amount stated
- 0
- People affected
Reported: Educational Testing Service (ETS) ETS (Company)
Compiled by ScamMarketCap from public recordsHappened Oct 16, 2026United States
An intruder using a compromised login copied files from a file transfer site run by Educational Testing Service (ETS), California's statewide student testing contractor, at various times between May 22 and September 18, 2026. ETS spotted the activity on September 25. The files covered all students enrolled in California public schools in the previous three school years and some former students going back to 2006, with names, dates of birth, addresses, student ID numbers, demographic details, disability status and test results. Social Security numbers and financial data were not included.
No official count has been released. California public schools enrolled more than 5.7 million students in 2025-2026 alone, and lawyers for the plaintiffs in a proposed class action filed against ETS on October 20, 2026, estimate that about 7 million current and former students were affected. The suit alleges negligence, breach of contract and invasion of privacy. The claims have not been proven.
ETS began notifying families on October 16, 2026, and is offering two years of free identity protection through Experian IdentityWorks.
This case file is compiled from public records and established reporting. Status as of the last update, Nov 3, 2026.
Case files summarize court records, regulator actions and established reporting.
Did this happen to you too? Share what you know: dates, amounts, names used, websites and wallet addresses.
to comment. It takes one email.
Case files summarize court records, regulator actions and established reporting.
Sign in to add yourself. Only the totals are public.
Comments
Did this happen to you too? Share what you know: dates, amounts, names used, websites and wallet addresses.