Photo via New York Post

Hackers steal sensitive personal info from millions of California students in massive breach

Read the original at New York Post ↗
Cite

Choi, J. (2026, October 16). Hackers steal sensitive personal info from millions of California students in massive breach. New York Post. https://nypost.com/2026/10/16/us-news/nearly-7m-california-students-data-exposed-in-mass-testing-hack/

Dated from the outlet's own feed. Check the original for its byline.

New York Post · collected 2026-10-17 · by Justin Choi

Quick Summary

Hackers stole sensitive personal information including names and disability status of all students enrolled in California public schools over the past three years. The breach targeted the Education Testing Service (ETS), which administers standardized tests for K-12 education in California, from May 22 to September 18, 2026. ETS identified unauthorized activity on an SFTP site used to exchange assessment data with the California Department of Education and immediately disabled the compromised account while initiating a cybersecurity investigation.
Written by AI on 2026-10-17, from this article's own text only (the story summary below draws on all the coverage).

AI analysis

Story summary

On September 25, 2026, hackers stole sensitive personal information from millions of California students in a massive breach. The Education Testing Service (ETS), which administers standardized testing for California K-12 public schools, identified unauthorized activity involving an SFTP site used to exchange data with the California Department of Education (CDE). The investigation revealed that an unauthorized party accessed the SFTP site from May 22, 2026, to September 18, 2026, using a compromised login credential. Affected students' names, demographic information, and disability status were among the stolen data, impacting all public school students in the state over the past three years. ETS disabled the compromised account and initiated an investigation with external cybersecurity experts.

Written for “California Student Data Breach” on 2026-11-01, grounded in this article and the 0 other(s) covering the same event.

Story

📰 California Student Data Breach
Education · 1 article(s) covering the same event.

Compared with similar articles

This article reads unscored and hedges 14% of its claims. Each row says how that neighbour differs.
Global News
Hedges 3 of 10 claims Outlet record 63/100
“The articles describe different cyberattacks affecting distinct educational systems in Burnaby and California.”
BBC News
Hedges 2 of 26 claims Outlet record 68/100
“The articles describe different breaches involving different organizations and dates, with one targeting ETS and affecting millions of California students, while the other involves Ogi Networks Limited and affects thousands mostly in the UK.”
How this article was measured signals, leaning charts, publisher record, byline, topics and claims

Signals How these are calculated →

Claims extracted
7
sentences that state something as happening or true
Uncertain
14%
1 of 7 hedged ("reportedly", "may", "according to")
Leaning
not political
takes no side on a contested political question
Publisher signals
66/100
New York Post's corrections and hedging, across everything collected from it. Not a measure of accuracy.
Outlets on this story
1
Education
Same framing elsewhere
1
articles that frame the event the way this one does
Analyzed 2026-10-17 · how these are computed

How this is being covered How these are calculated →

Article leaning vs. publisher reliability
Source leaning vs. consistency

Publisher

New York Post · 15765 article(s) · 35 correction(s) detected
Running correction rate · 35 correction(s)

Who wrote this

Justin Choi
61 article(s) here · 1 carrying a prediction
🔮 A tiny Northern California town is facing fresh fears over public safety after officials voted to slash its already stretched police force, leaving residents worried about who will respond when trouble strikes.
🔮 We activated our Mobile Command Post and strategically deployed emergency response resources into areas expected to be impacted,” the city said Thursday.
🔮 His Los Angeles concert was set to kick off on Monday at 7:30 p.m. at The Greek Theatre, but it will now be rescheduled to November 4.
🔮 Our investigation will include looking into any prior calls for service at that location,” the department added on.
🔮 A massive $850 million sports empire is making its play for Southern California, with a sprawling 190-acre complex packed with more than 40 fields set to open its gates Saturday.
🔮 Raging floodwaters have ravaged northwest New Mexico, trapping families on rooftops and sparking frantic helicopter rescues as a powerful Pacific storm unleashes chaos across the Southwest. “Once-in-a-generation” flooding along the San Juan and Animas rivers slammed communities across San Juan County Thursday, with more water expected to surge downstream through the weekend. New Mexico State Police and National Guard troops were seen pulling stranded residents to safety and scouring the river in Bloomfield as floodwaters swallowed cars, poured into homes and forced families onto rooftops. Sign up for the California Morning Report newsletter The biggest news, opinion and culture shaping California right now.
🔮 Linh Luu and Kevin Le, an Anaheim couple, pleaded guilty Friday in federal court in Oregon to violating the Lacey Act, which bars illegal wildlife imports and exports. Sign up for the California Morning Report newsletter The biggest news, opinion and culture shaping California right now. Thanks for signing up! “According to court documents and statements made in court, Luu and Le admitted that from September 2019 through May 2021, they processed $51,100 in payments to aid an individual in Vietnam to illegally move wildlife items to and from Oregon,” the DOJ said.
🔮 USCG also suggested that the ship may have been involved in a maritime smuggling operation. “The vessel had a large number of people onboard and was following a route normally used in illegal maritime smuggling operations.
🔮 The event will run from 9 p.m. to 2 a.m. and will have five different experiences such as “The Graveyard,” “The Haunted Ballroom” and “The Forbidden Library.”
🔮 Scientists say warmer waters may be pushing some shark species north from their usual habitats, bringing them closer to popular California beaches.
Also by Justin Choi
Nothing else under this byline is closely related to this article, so these are simply their most recent.
All 61 articles by Justin Choi →

Topics

CDE California ETS The Education Testing Service the California Assessment

Subjects

California GPE · 4× ETS ORG · 4× CDE ORG · 3× ELPAC ORG · 1× The Education Testing Service ORG · 1× the California Department of Education ORG · 1×

Narrative

“On September 25, 2026, ETS identified unauthorized activity involving an SFTP site used to exchange California statewide assessment information with CDE,” the California Department of Education (CDE) said.
framing: assertive · carried by 1 article(s) · first seen 2026-10-17
🔮 The investigation determined that an unauthorized party used a compromised login credential at various times during the period from May 22, 2026 to September 18, 2026 to access the SFTP site to copy files containing California student information,” CDE added on.

Claims (7 extracted, 1 hedged)

The information stolen includes students’ names, demographic information and disability status. asserted
information → steal → names
The hack affected all students enrolled in the state public schools over the past three years. asserted
hack → affect → years
The Education Testing Service (ETS) –– a nonprofit organization that administers standardized testing for California K-12 public schools –– was specifically targeted. asserted
that → administer → schools
ETS manages California’s statewide assessments such as the California Assessment of Student Performance and Progress (CAASPP) and the English Language Proficiency Assessments for California (ELPAC). asserted
ETS → manage → California
“On September 25, 2026, ETS identified unauthorized activity involving an SFTP site used to exchange California statewide assessment information with CDE,” the California Department of Education (CDE) said. asserted
Department → identify → Education
“ETS disabled the account involved, took the affected SFTP site offline, and initiated an investigation with the assistance of external cybersecurity experts. asserted
ETS → disable → experts
The investigation determined that an unauthorized party used a compromised login credential at various times during the period from May 22, 2026 to September 18, 2026 to access the SFTP site to copy files containing California student information,” CDE added on. uncertain
CDE → determine → information
💬Give feedback
🕘History 🎫Support