Compromised login exposed records of millions of California students

SecurityWeek reports that California’s Department of Education says an intruder used a compromised ETS login to copy student records between May 22 and September 18, 2026. CDE gave no victim count; the records covered all students enrolled in the previous three school years and some who left as far back as 2006. The files contained no Social Security numbers. Affected students can sign up for two years of free identity protection.