Millions of California students’ sensitive data stolen in breach


Personal information belonging to millions of current and former California public school students has been stolen from a system operated by Educational Testing Service (ETS).

ETS is a nonprofit organization that helps run the state’s standardized tests under contract with the California Department of Education (CDE). It has begun notifying students and families after an unauthorized party accessed and copied student information from an ETS-operated secure file transfer protocol (SFTP) site. CDE is distributing the ETS breach notice to help affected individuals receive information about the incident and available resources.

An investigation determined that an unauthorized party used compromised login details to ​access the site and copy files containing California student information at various ​times between May 22 and September 18.

Read more…
Source:  MalwareBytes Labs


Sign up for the Cyber Security Review Newsletter
The latest cyber security news and insights delivered right to your inbox


Related:

  • Beware Feb. 3, 2025 – Diabolic Ransomware Gang Issues New Attack Warning

    December 21, 2024

    If you thought law enforcement had not only disrupted the LockBit ransomware operation, alongside trolling the criminal gang behind it but taken it out of business altogether, then you are likely in for a shock: LockBitSupp, the group’s alleged leader, has warned LockBit 4 will return next year. In fact, a dark web posting said the ...

  • 240,000 Credit Union Members Exposed

    December 20, 2024

    A recent data breach at SRP Federal Credit Union, based in South Carolina, has left over 240,000 members vulnerable to potential identity theft and financial fraud. Between Sept. 5 and Nov. 4, 2024, hackers accessed sensitive personal data, including Social Security numbers, driver’s license information, dates of birth and financial account details. The ransomware group Nitrogen ...

  • Third member of LockBit ransomware gang has been arrested

    December 20, 2024

    U.S. prosecutors in New Jersey on Friday publicly announced charges against Rostislav Panev, 51, a dual Russian-Israeli national accused of being a key developer in the LockBit ransomware gang. Panev is currently in Israeli custody and faces extradition to the United States. LockBit is one of the most prolific ransomware gangs, accused of launching crippling data-stealing ...

  • US consumer watchdog sues big banks over ‘widespread’ fraud on Zelle payment app

    December 20, 2024

    The U.S. Consumer Financial Protection Bureau said on Friday it filed a lawsuit against JPMorgan Chase, Bank of America and Wells Fargo for failing to protect consumers from alleged “widespread fraud” on payments platform Zelle. The lawsuit was initiated as the watchdog moves ahead with an aggressive agenda in the final weeks of Joe Biden’s Democratic ...

  • Ransomware attack on health giant Ascension hits 5.6 million patients

    December 20, 2024

    A May ransomware attack on Ascension, a U.S. healthcare giant with more than 140 hospitals and dozens of senior living facilities, allowed hackers to steal personal and sensitive health information on 5.6 million patients, according to a new filing with Maine’s attorney general. The cyberattack caused widespread disruption across its hospital system, with some staff describing ...

  • U.S. Considers Ban On Chinese Made TP-Link Routers

    December 18, 2024

    The United States government is taking aim at TP-Link, a Chinese technology company that dominates the home and small-business router market in the U.S., amid mounting national security concerns. With TP-Link holding a significant 65% market share, federal authorities are investigating potential vulnerabilities in the company’s devices that could be exploited by foreign entities for cyberattacks. Read ...