California's Department of Education (CDE) warned all public school students of a data breach affecting assessment contractor Educational Testing Service (ETS).

The vulnerability or weakness

The breach occurred through a secure file transfer protocol site that was accessed by hackers between May 22 and September 18, 2023.

Earlier attacks and coverage

No earlier related attack in our archive yet.

Business impact

ETS took steps to secure the platform and reduce the risk of the data being publicly accessible, but the incident could still impact operations and reputation.

Industries affected

This incident affects the education sector, specifically K-12 public schools in California.

Users affected

All current and former students enrolled in California public schools between 2023 and the current school year, as well as students who left a California school since 2006, are affected.

Sources