Florida says a breach of its student financial aid website may affect 4.9 million people
October 29, 2026 (Found October 19; announced October 29, 2026)
Florida Department of Education staff became aware of the incident on October 19 and announced it on October 29. The department estimates about 4.9 million people may be affected and says the exposed information includes Social Security numbers. It has not said what else was taken. The department believes the incident was limited to the Florida Student Financial Aid website, and says current aid payments, tuition payments, scholarships, grants and loan eligibility are not affected. It notified the state attorney general and is working with the Florida Digital Service and the Florida Department of Law Enforcement, and one report says the incident is under criminal investigation. The cause and the attacker have not been announced.
Why it matters
Social Security numbers are hard to replace and are used to open credit in someone's name, so misuse can appear long after the breach. A financial aid site holds them for a very large number of people.
What defenders can take from it
- If you may be affected, consider a credit freeze or fraud alert, review your credit reports (free at annualcreditreport.com) and use identitytheft.gov for guidance.
- Be wary of emails and calls that mention the breach, and use the department's own contact details: [email protected] or fldoe.org/databreach.stml.
- Organizations: collect and keep as few identifiers as you can, and know exactly which sites store them.