Florida Department of Education student financial aid breach — unauthorized access may expose data of ~4.9 million people
Severity: high · Patch status: no-fix-needed · Since 2026-10-29
The Florida Department of Education disclosed that staff learned of unauthorized criminal access to its Florida Student Financial Aid website on October 19, 2026. The breach may have exposed personal information — including Social Security numbers — belonging to approximately 4.9 million people, making it one of the larger state education-sector breaches. The department activated its cybersecurity incident response upon discovery. Details on the attack vector, threat actor, and exact data types exposed have not been publicly confirmed, and the full scope remains under investigation. Affected individuals are users of Florida's state student financial aid programs. No patch applies; remediation centers on incident response, forensics, and notification to affected individuals.
What to do
- Monitor for follow-up notifications from the Florida Department of Education and enroll in any offered credit monitoring or identity protection
- Place fraud alerts or credit freezes with the major credit bureaus given potential SSN exposure
- Watch for phishing or scams that reference the breach or student aid applications
- Organizations in the education sector should review web application access controls, monitoring, and incident response plans for similar aid/portal systems
Sources
All live incidents on Threat Watch
