Education sector data breaches expose student records, Social Security numbers, financial aid information, grades, disciplinary records, and sometimes health records at K-12 schools, colleges, and universities. Because many affected individuals are minors, these breaches carry a heightened long-term identity theft risk that can go completely undetected for years, since a stolen child’s identity is rarely checked against credit reports until adulthood. Schools and universities are frequent ransomware targets due to often-limited cybersecurity budgets relative to the volume of sensitive data they store, including admissions records, financial aid applications, and staff payroll information. Parents, students, faculty, and staff can all be affected by a single incident at an educational institution. This page tracks confirmed data breaches at schools, colleges, and universities, including what data was exposed, which companies or institutions notified regulators, and what affected individuals and families can do next to monitor for identity theft and understand their legal rights.
A ransomware group claims to have stolen 35 GB of data from Tulare Western High School, raising concerns about exposed student and staff records.
Tulare Western High School Data Breach Exposes Student and Staff Records Read More »
Kendall Hunt Publishing, a major PreK-12 curriculum publisher, suffered a ransomware attack claimed by the group, raising concerns about exposed personal and student-related data.
Kendall Hunt Publishing Data Breach Exposes Personal and Student-Related Information Read More »
Odyssey Charter School, Inc. suffered a ransomware attack claimed by the threat actor group, raising concerns that student and family personal information may have been accessed or stolen.
Odyssey Charter School, Inc. Data Breach Exposes Student and Family Personal Information Read More »
Dublin City Schools in Georgia suffered a ransomware attack claimed by the Eclipse group, raising concerns that student and employee personal information was accessed or stolen.
Dublin City Schools Data Breach Exposes Student and Employee Personal Information Read More »
Alaska Electrical Apprenticeship was targeted by the ransomware group, raising concerns that personal and training records tied to apprentices and staff were accessed or stolen.
Alaska Electrical Apprenticeship Data Breach Exposes Personal and Training Records Read More »
Marion Military Institute notified regulators of a data breach that exposed Social Security numbers, financial account codes, and credit and debit account information belonging to affected individuals.
Merced Union High School District has notified individuals that their personal information was exposed in a data breach, and it is now offering free monitoring services to those affected.
Merced Union High School District Data Breach Exposes Personal and Financial Information Read More »
Houston City College suffered a data breach in June 2026 after an extortion attack led to public exposure of academic records, contact details, and personal information for current students and alumni.
Houston City College Data Breach Exposes Academic Records and Personal Information Read More »
Southern Illinois University notified regulators that a data breach exposed Social Security numbers belonging to an undisclosed number of individuals. Here is what affected people need to know.
Southern Illinois University Data Breach Exposes Social Security Numbers Read More »
Bennett College notified individuals that their personal information may have been exposed in a data security incident, and it is now offering free credit monitoring through Cyberscout.
Bennett College Data Breach Exposes Personal and Financial Information Read More »