Incident · one vendor, 2 organisations
The Educational Testing Service breach
16 October 2026 to 29 October 2026
2 organisations on the tracker had data taken through Educational Testing Service, which reported its own breach on 29 October 2026. Each one is listed with the words of the source that names Educational Testing Service.
The vendor
Organisations affected through Educational Testing Service
-
CDE
–not reported
Educational Testing Service (ETS), at the direction of the California Department of Education (CDE), is notifying California students and families about a data security incident involving unauthorized access to and copying of student data from an ETS secure file transfer protocol (SFTP) site
notice letter
Counts are each organisation’s own and can overlap: one person can be a customer of several. An organisation joins this list only when a source names Educational Testing Service as the way its data was taken.
From the data breach tracker: official notices, breach databases and the news, every fact with its source. Open data (CC BY 4.0) · How the tracker works · Official registers · Corrections and changes · Found a mistake? Tell us and we correct it.