Education sector data breaches expose student records, Social Security numbers, financial aid information, grades, disciplinary records, and sometimes health records at K-12 schools, colleges, and universities. Because many affected individuals are minors, these breaches carry a heightened long-term identity theft risk that can go completely undetected for years, since a stolen child’s identity is rarely checked against credit reports until adulthood. Schools and universities are frequent ransomware targets due to often-limited cybersecurity budgets relative to the volume of sensitive data they store, including admissions records, financial aid applications, and staff payroll information. Parents, students, faculty, and staff can all be affected by a single incident at an educational institution. This page tracks confirmed data breaches at schools, colleges, and universities, including what data was exposed, which companies or institutions notified regulators, and what affected individuals and families can do next to monitor for identity theft and understand their legal rights.
Strong Foundations Charter School notified families and regulators that an unauthorized person accessed staff email accounts containing names, state identification numbers and financial account information.
A ransomware group called Kairos claims to have stolen 762 GB of data from Slate Valley Unified School District in Vermont, including employee Social Security numbers and sensitive student records.
Frontline Education, a major provider of school workforce management software, is notifying school districts that hackers accessed employee data including Social Security numbers after exploiting a third-party software vulnerability.
Frontline Education Data Breach Exposes Social Security Numbers and Employee Data Read More »
A ransomware group known as Booba Project claims to have stolen 344GB of data from the University of Illinois Chicago, raising concerns about exposed student and employee records.
University of Illinois Chicago Data Breach Exposes Student and Employee Records Read More »
Nishiyamato Academy has notified the California Attorney General of a data breach that may have exposed personal information belonging to students, families, or staff. Here is what is known so far and what affected individuals should do next.
Nishiyamato Academy Data Breach Exposes Student and Family Personal Information Read More »
A ransomware group known as Incransom claims to have breached North Slope Borough School District, allegedly accessing sensitive student and staff data from the Alaska school system.
A ransomware group known as Booba Project claims to have stolen 35 GB of data from Tulare Western High School, raising concerns about exposed student and staff records.
Tulare Western High School Data Breach Exposes Student and Staff Records Read More »
Kendall Hunt Publishing, a major PreK-12 curriculum publisher, suffered a ransomware attack claimed by the incransom group, raising concerns about exposed personal and student-related data.
Kendall Hunt Publishing Data Breach Exposes Personal and Student-Related Information Read More »
Odyssey Charter School, Inc. suffered a ransomware attack claimed by the Wallstreet threat actor group, raising concerns that student and family personal information may have been accessed or stolen.
Odyssey Charter School, Inc. Data Breach Exposes Student and Family Personal Information Read More »
Dublin City Schools in Georgia suffered a ransomware attack claimed by the Eclipse group, raising concerns that student and employee personal information was accessed or stolen.
Dublin City Schools Data Breach Exposes Student and Employee Personal Information Read More »