Skip to content
Bramble

Crime

Hackers steal data of 7 million California public school students via testing nonprofit

The California Department of Education said on Friday that personal data of about 7 million public school students was stolen from the Educational Testing Service, a nonprofit contractor that administers state tests.

2 outlets · 0L · 0C · 2R First reported Account updated
Image: New York Post
Image: Just the News

1 / 2

The story, neutrally told

Right · 1Hackers stole personal information from 7 million California public school students, authorities announced on Friday 16 October 2026. Right · 1The California Department of Education notified students and their families that a data security incident had resulted in their personal information being stolen. Right · 2The data was taken from the Educational Testing Service (ETS), a nonprofit assessment organisation under contract with the state to administer standardised tests, according to Just the News; the New York Post, citing Politico, described it as a nonprofit with a contract with the state Department of Education.

Right · 2The exposed information varied by student but included names, addresses, demographic information and disability status, and covered students enrolled in California public schools over the past three school years. Right · 1Social Security numbers, financial account information, passwords, and parent or guardian information were not involved. Right · 1The department said an unauthorized party used a compromised login to access student information on an ETS-operated secure file transfer protocol (SFTP) site, and that the access happened at various times between May 22 and September 18, 2026.

Right · 1ETS said it has since taken measures to strengthen security, including taking the SFTP site offline and building a new site with enhanced security controls.

Every sentence links to the reporting it rests on. The pill in front of each says where its sources sit: Left, Centre or Right when one side supplies at least half of them, Mixed when they are evenly split. The number is how many outlets it cites.

Left0 outlets

No left outlet in our sources has covered this story yet.

Centre0 outlets

No centre outlet in our sources has covered this story yet.

Right2 outlets

Framing
Both outlets report the breach as a straightforward data-security story. The New York Post calls it a 'massive breach' and leads on the scale; Just the News gives more procedural detail on how it happened and what was not exposed.
Emphasis
Scale (7 million students), the types of data taken, and, in Just the News, the compromised login, dates and ETS's response.
Leaves out or plays down
Neither reports who the hackers were, whether the data has been misused, or what remedies are offered to families. The Post's short report omits the exclusions (no Social Security numbers) and the ETS response.
Charged language
“massive breach”
For example
“Hackers stole personal information from 7 million California public school students as part of a massive breach, authorities announced Friday.” — New York Post
“Social Security numbers, financial account information, passwords, and parent or guardian information were not involved.” — Just the News

Ask about this story

Loading…