The state of California, often lauded by its progressive leadership, now faces a stark reality check: a massive data breach has compromised the personal information of millions of its students. The California Department of Education confirmed Friday that a hacker exploited a contractor’s system, exposing sensitive details including names, birth dates, addresses, and even disability status.
The incident, a grave betrayal of public trust, underscores a systemic failure to safeguard the most vulnerable in the state's care.
Educational Testing Service (ETS), the nonprofit contractor entrusted with California’s assessment data, began notifying affected students and families on October 16. Investigators revealed that an unauthorized party gained access through a compromised login, systematically copying records from a secure file transfer site over several months, from May 22 to September 18.
With over 5.7 million students enrolled in California during the 2025–2026 school year alone, the scale of this security lapse is staggering. This isn’t a minor incident; it's a monumental breach impacting nearly every family engaged with the state's public education system.
"ETS takes the security of student information with the utmost seriousness, and sincerely regrets that this incident occurred," the department stated, relaying ETS’s hollow apology. While apologies are offered, the core issue remains: how could such a critical system, handling the data of millions of American children, be so vulnerable for so long?
The department claims it is sending out ETS’s Notice of Data Breach to provide families with details and "available help." After belatedly learning of the breach on September 25, the department and the State Board of Education brought in "state cybersecurity partners" and ETS to assess the damage. One might ask why these "partners" weren't ensuring robust security before millions of records walked out the digital door.
The copied files not only covered current students but also those enrolled in the three previous school years, broadening the scope of this privacy disaster. The compromised data included student names, dates of birth, addresses, schools, grade levels, Statewide Student Identifiers, demographic details, disability and program participation status, and assessment records. While officials quickly noted that Social Security numbers, financial account information, passwords, and parent or guardian details were not involved in this specific breach, the sheer volume and sensitivity of the exposed information should still send shivers down the spine of every parent.
ETS has since taken the old site offline and claims to have built a "new one with stronger security controls." Regular monitoring, we are told, has not found evidence that the stolen information has been posted publicly – yet. The California Department of Education and the State Board of Education are now "reviewing the incident and ETS’s compliance," which is precisely what should have been happening proactively all along.
This isn't an isolated incident for California's education system. It's a pattern of negligence. The Los Angeles Unified School District suffered a major cyberattack in September 2022, where hackers accessed approximately 2,000 sensitive student records. When Superintendent Alberto Carvalho rightly refused to pay a ransom, the criminals simply published the stolen data online weeks later. Long Beach Unified School District also experienced a breach, with student identification numbers, names, and email addresses compromised.
The repeated failures to secure student data in one of the nation's wealthiest and most technologically advanced states highlight a profound lack of accountability and oversight. In an era where digital privacy is paramount, especially for children, California's progressive leadership seems incapable of delivering basic protection. American families deserve far better than bureaucratic apologies and after-the-fact reviews; they deserve a government that prioritizes security, common sense, and the well-being of its citizens over ideological posturing.
