VULNpocalypse
HighBreach / campaignMonitoring

Florida Department of Education confirms financial aid site breach exposing SSNs of about 4.9 million people

Florida’s education department says hackers accessed its student financial aid website, exposing Social Security numbers and other data of about 4.9 million

Published
Updated
Exploitation
Yes, FLDOE confirmed an unauthorized party accessed the system, discovered October 19, 2026

What happened

The Florida Department of Education (FLDOE) says it became aware of a data breach involving the Florida Student Financial Aid website on October 19, 2026 The Record. The department said it believes the incident was limited to FloridaStudentFinancialAidSG.org and may have affected approximately 4.9 million individuals SecurityWeek.

The exposed data includes names, addresses, phone numbers, genders (gender codes), email addresses, Social Security numbers and dates of birth The Record. FLDOE noted that not all individuals were necessarily affected and that the specific information involved may vary by person SecurityWeek.

Response details reported so far:

  • FLDOE is working with the Florida Digital Service and the Florida Department of Law Enforcement, and says the incident has been contained and reported to the Office of the Attorney General The Record.
  • The financial aid site was taken down, and other department websites and services may see temporary disruptions The Record.
  • Existing aid is not at risk. FLDOE says disbursements, tuition payments, scholarships, grants and student loans will not be delayed or changed The Record, SecurityWeek.
  • FLDOE has not disclosed how the attackers got in or who is responsible, and no threat group appears to have publicly claimed the attack SecurityWeek. The department declined to comment on the nature of the incident or the attackers The Record.

Related context: this is reported as the second large Florida government breach this year. The state’s motor vehicle agency confirmed a breach in September, and the ShinyHunters group had claimed to have stolen more than 200,000 driver records. That agency traced the intrusion to compromised credentials of a local police department user but did not name ShinyHunters SecurityWeek. Any link between the two incidents is not confirmed.

Am I affected?

  • Applicants: FLDOE warns that anyone who has applied for financial aid in Florida in the past could be among those affected SecurityWeek. Because the data includes Social Security numbers and dates of birth, treat yourself as exposed until you are told otherwise.
  • Developers and IT teams: this is a data breach, not a software flaw. No CVE, affected software version or patch has been reported, and the entry point is not confirmed.
  • Whether the stolen data has been published or sold: not confirmed in the sources.
  • How and when individuals will be notified: not confirmed.

What to do now

  1. Monitor your credit reports and financial accounts for irregular activity, as FLDOE advises The Record.
  2. If you find unfamiliar accounts, inquiries or transactions, report them to the affected institution and consider a fraud alert or credit freeze. This is general precaution and not stated in the sources.
  3. Be cautious with unexpected emails, calls or texts that use your name, address or aid details, since contact details and identifiers were exposed. This is a general precaution as well.
  4. Do not assume your aid is at risk. FLDOE says payments and eligibility are unaffected, but expect temporary disruptions to some department sites and services SecurityWeek.
  5. If you run systems that integrate with Florida education services, watch for official FLDOE updates on service availability. Details on integrations are not confirmed.
  6. Follow FLDOE and state announcements for updates on the investigation, since cause and attribution are not yet public.

Sources