4.9 million records compromised in Florida student aid breach

The Florida Department of Education confirmed on Thursday that a cyberattack on its student financial aid website exposed the personal information of approximately 4.9 million people. The department stated that the unauthorized criminal access, detected on Oct. 19, included Social Security numbers. Officials did not specify what other types of personally identifiable information were compromised.

The incident appears confined to the Florida Student Financial Aid website. FLDOE activated its cybersecurity response protocols immediately upon detection to contain the activity and secure its systems. The department has notified the Florida Attorney General's Office and is now working with the Florida Digital Service and the Florida Department of Law Enforcement. A criminal investigation into the breach remains open.

The exposure affects a large portion of the state's student population. With nearly five million records at risk, the breach represents a major security event for the state's education infrastructure. The lack of clarity on other exposed data points adds uncertainty for affected residents who must now monitor their financial profiles.

FLDOE stated that current financial aid operations remain stable. The incident will not delay the disbursement of financial aid funds or tuition payments. Eligibility for scholarships, grants, and student loans managed by the department will also remain unaffected. However, some department websites and online services may experience temporary disruptions while officials work to restore full functionality.

The department recommends that affected individuals monitor their financial and online accounts for suspicious activity. Residents are advised to review account statements and credit reports regularly. FLDOE suggests considering a fraud alert or credit freeze with major credit bureaus as a precautionary measure. Consumers can obtain free credit reports through AnnualCreditReport.com and find additional guidance at the Federal Trade Commission's IdentityTheft.gov website.

FLDOE established a dedicated email address, databreach@fldoe.org, for questions regarding the breach. The department noted that information may change as the criminal investigation continues. Updates on the incident are being posted on its data breach information page.