Education sector data breaches expose student records, Social Security numbers, financial aid information, grades, disciplinary records, and sometimes health records at K-12 schools, colleges, and universities. Because many affected individuals are minors, these breaches carry a heightened long-term identity theft risk that can go completely undetected for years, since a stolen child’s identity is rarely checked against credit reports until adulthood. Schools and universities are frequent ransomware targets due to often-limited cybersecurity budgets relative to the volume of sensitive data they store, including admissions records, financial aid applications, and staff payroll information. Parents, students, faculty, and staff can all be affected by a single incident at an educational institution. This page tracks confirmed data breaches at schools, colleges, and universities, including what data was exposed, which companies or institutions notified regulators, and what affected individuals and families can do next to monitor for identity theft and understand their legal rights.
A ransomware group claims it stole 295 GB of data from the Research Foundation of The City University of New York. The organization has not confirmed the incident.
A ransomware group has claimed responsibility for a reported data breach at Seminole Schools, allegedly taking tens of gigabytes of files. The district has not publicly confirmed the incident.
Seminole Schools Data Breach Claim: Personal Information Reportedly Exposed Read More »
Inner City Education Foundation notified the California Attorney General of a data breach. The specific records involved have not been made public yet.
Inner City Education Foundation Data Breach Exposes Personal Information Read More »
A ransomware group claims responsibility for an alleged American Campus data breach. The company has not confirmed the incident, and the exposed data has not been publicly disclosed.
American Campus Data Breach Claim: Personal Information Reportedly Exposed Read More »
An extortion group has claimed responsibility for a reported data breach at Joliet Public Schools District 86, though the district has not publicly confirmed the incident.
Wayne-Finger Lakes BOCES notified the Vermont Attorney General that a data breach exposed Social Security numbers, raising identity theft risks for affected individuals.
Wayne-Finger Lakes BOCES Data Breach Exposes Social Security Numbers Read More »
A ransomware group has claimed responsibility for an alleged attack on Friendship Christian School, reportedly involving unauthorized access to school data. The school has not publicly confirmed the incident.
A ransomware group claims it stole student grades, health records, financial aid data, and employee files from Shalom Christian Academy. The school has not publicly confirmed the incident.
Shalom Christian Academy Data Breach Claim: Student and Staff Records Reportedly Exposed Read More »
The Meadows School disclosed a data breach to Massachusetts regulators involving Social Security numbers and driver’s license numbers tied to at least 14 state residents.
Alisal Union School District notified the California Attorney General of a data breach that may have exposed sensitive personal information belonging to students, families, or staff.
Alisal Union School District Data Breach Exposes Student and Staff Personal Information Read More »