40 days (found 25 September 2026, by the company’s letter)
What was exposed
The register’s list does not say what was exposed; the notice it links to (under Sources) usually does.
How it happened
How
Stolen password or login an unauthorized party used a compromised login credential at various times during the period from May 22, 2026 to September 18, 2026 to access the SFTP site to copy filessource
Through
Educational Testing Service (ETS) Educational Testing Service (ETS), at the direction of the California Department of Education (CDE), is notifying California students and families about a data security incident involving unauthorized access to and copying of student data from an ETS secure file transfer protocol (SFTP) sitesource · 3 organisations hit through Educational Testing Service →
What the letter says
Found
On September 25, 2026, ETS identified unauthorized activity involving an SFTP site
Began
an unauthorized party used a compromised login credential at various times during the period from May 22, 2026 to September 18, 2026
At
Educational Testing Service (ETS), at the direction of the California Department of Education (CDE), is notifying California students and families about a data security incident involving unauthorized access to and copying of student data from an ETS secure file transfer protocol (SFTP) site
Offered
ETS is providing complimentary identity-protection services through Experian IdentityWorks for 2 years
Yu Ming Charter School (United States) notified the California Attorney General of a data breach on 4 November 2026. How it happened, by the sources: stolen credentials, through Educational Testing Service (ETS).
What data was exposed in the Yu Ming Charter School breach?
The notices and reports so far do not say what was exposed. This page is updated when they do.
How do I know if I was affected?
Organisations normally tell the people whose data was involved, by letter or email, and that notice says what of yours was in it. The letter it filed is on this page. We cannot look up individual people. If you got a notice, check that it is real, then follow the steps on this page.
Is there a Yu Ming Charter School data breach settlement?
No settlement open for claims is on record for Yu Ming Charter School as of 15 November 2026. A settlement usually comes a year or more after a breach, if a court approves one. Every open settlement is listed with its deadline.
Is a letter, email or text about the Yu Ming Charter School breach real or a scam?
A real notice names the breach, says what data was involved and never asks for a password, a code or a payment. Criminals often send fake notices after a breach is in the news. Do not use links or phone numbers in the message: go to Yu Ming Charter School’s own site, or check the letter here.
Privacy Unpacked