The California Department of Education said unauthorized parties copied student records from an SFTP site run by testing contractor Educational Testing Service, with data going back to 2006. Fields include names, state student IDs, birth dates, addresses, disability and program information. SSNs and parent data were not involved; two years of identity protection are offered.
What to do: SFTP site rebuilt; notifications in 27 languages running through early November.
· 20 days ago · 5.7 million students per LA Times · California Dept of Education
Why this score
Millions of children (impact 3), completed exfiltration (exploitability 2), education sector (criticality 0).