Attackers used a single set of compromised credentials to break into an ETS SFTP server and copy records belonging to millions of California students. The data includes records dating back to 2006, according to a SecurityWeek report.
The breach highlights how a single stolen login can lead to a large-scale data exposure. In this case, the attackers accessed a file-transfer server that held years of accumulated student information.
The report did not disclose the exact number of records or the specific data fields exposed. It noted only that the intruders copied records of California students going back to 2006, underscoring the long-term risk of credential-based attacks on archival systems.