ONE COMPROMISED LOGIN EXPOSED MILLIONS OF CALIFORNIA STUDENTS' RECORDS

Summary from the TLDR InfoSec newsletter

An unauthorized party used a compromised login from May 22 to September 18 to copy California student files from an Educational Testing Service SFTP server. The data covers current and former students dating to 2006 and may include names, addresses, IDs, disability status, accommodations, and test results. The breach did not expose Social Security numbers, passwords, or financial details. ETS disabled the account, took the site offline, and is building a replacement system.