Stolen login exposes California student records at ETS
A compromised credential let an intruder copy California student files from an ETS SFTP site between May and September 2026. Names, birth dates, addresses, and state IDs were exposed.
A compromised credential let an intruder copy California student files from an ETS SFTP site between May and September 2026. Names, birth dates, addresses, and state IDs were exposed.
Attackers used stolen credentials to raid DTU's DTUBasen identity system, exposing CPR numbers and personal data on up to 200,000 current and former users dating to 2003.
Frontline Education says attackers exploited a third-party software flaw in August to steal school district employees' Social Security numbers, emails, and addresses.
ShinyHunters exfiltrated 3.65 TB from Instructure's Canvas LMS, defaced login pages at 330 schools, then accepted a payment in exchange for 'returning' the data. The data is still out there.