Privacy Unpacked

Incident · one vendor, 2 organisations

The Educational Testing Service breach

16 October 2026 to 29 October 2026

2 organisations on the tracker had data taken through Educational Testing Service, which reported its own breach on 29 October 2026. Each one is listed with the words of the source that names Educational Testing Service.

The vendor

  1. Educational Testing Service (ETS)reportedCountry being checked · 29 October 2026 Dates of birthNamesAddresses+2 5.7Mstudents

Organisations affected through Educational Testing Service

  1. CDEUSUnited States · 16 October 2026 –not reported

    Educational Testing Service (ETS), at the direction of the California Department of Education (CDE), is notifying California students and families about a data security incident involving unauthorized access to and copying of student data from an ETS secure file transfer protocol (SFTP) site notice letter

Counts are each organisation’s own and can overlap: one person can be a customer of several. An organisation joins this list only when a source names Educational Testing Service as the way its data was taken.

From the data breach tracker: official notices, breach databases and the news, every fact with its source. Open data (CC BY 4.0) · How the tracker works · Official registers · Corrections and changes · Found a mistake? Tell us and we correct it.