Education sector data breaches expose student records, Social Security numbers, financial aid information, grades, disciplinary records, and sometimes health records at K-12 schools, colleges, and universities. Because many affected individuals are minors, these breaches carry a heightened long-term identity theft risk that can go completely undetected for years, since a stolen child’s identity is rarely checked against credit reports until adulthood. Schools and universities are frequent ransomware targets due to often-limited cybersecurity budgets relative to the volume of sensitive data they store, including admissions records, financial aid applications, and staff payroll information. Parents, students, faculty, and staff can all be affected by a single incident at an educational institution. This page tracks confirmed data breaches at schools, colleges, and universities, including what data was exposed, which companies or institutions notified regulators, and what affected individuals and families can do next to monitor for identity theft and understand their legal rights.
A ransomware group has claimed responsibility for a cyberattack targeting Yale University Press’s Yale Books website, raising concerns about exposed customer data.
Yale University Press Data Breach Exposes Customer and Order Information Read More »
A ransomware group has claimed responsibility for a data breach affecting The New Community School in Richmond, VA. The school has not publicly confirmed the incident.
The New Community School Data Breach Exposes Student and Family Records Read More »
Edgewood ISD, a San Antonio school district, reported a data breach affecting 3,000 Texans to the Texas Attorney General, with names, Social Security numbers and dates of birth involved.
Edgewood ISD Data Breach Exposes Social Security Numbers and Dates of Birth Read More »
A ransomware group claims it stole over 500GB of confidential student, staff, and financial data from Philander Smith University and encrypted files across the school’s network.
Philander Smith University Data Breach Exposes Student and Staff Financial Information Read More »
Strong Foundations Charter School notified families and regulators that an unauthorized person accessed staff email accounts containing names, state identification numbers and financial account information.
A ransomware group claims to have stolen 762 GB of data from Slate Valley Unified School District in Vermont, including employee Social Security numbers and sensitive student records.
Frontline Education, a major provider of school workforce management software, is notifying school districts that hackers accessed employee data including Social Security numbers after exploiting a third-party software vulnerability.
Frontline Education Data Breach Exposes Social Security Numbers and Employee Data Read More »
A ransomware group claims to have stolen 344GB of data from the University of Illinois Chicago, raising concerns about exposed student and employee records.
University of Illinois Chicago Data Breach Exposes Student and Employee Records Read More »
Nishiyamato Academy has notified the California Attorney General of a data breach that may have exposed personal information belonging to students, families, or staff. Here is what is known so far and what affected individuals should do next.
Nishiyamato Academy Data Breach Exposes Student and Family Personal Information Read More »
A ransomware group claims to have breached North Slope Borough School District, allegedly accessing sensitive student and staff data from the Alaska school system.