Florida Department of Education says financial aid website breach may have exposed Social Security numbers of about 4.9 million people
Teaser from the source
The Florida Department of Education (FLDOE) said on Oct 29 2026 that it became aware on Oct 19 of "unauthorized criminal access to the financial aid website". Personally identifiable information, including Social Security numbers, was potentially exposed. FLDOE says it stopped the activity, contained the incident and secured its systems, notified the office of Florida Attorney General James Uthmeier, and is working with the Florida Digital Service and the Florida Department of Law Enforcement. It says financial aid disbursements, tuition payments and eligibility for scholarships, grants and student loans are not affected. In an update later on Oct 29, FLDOE said the breach, which appears limited to the Florida Student Financial Aid website (FloridaStudentFinancialAidSG.org), may have affected approximately 4.9 million people. It hasn't said who was behind the attack or how the intrusion happened, and the case remains under criminal investigation.
This is the RSS-feed teaser. Read the full article at the original source.
Read at pwn.watchMore on Department
Other advisories
- Not ratedosv:CVE-2026-111689XBoot through 3.3.4 Authorization Bypass via getByDepartmentId Endpoint
- Not ratedosv:CVE-2026-108635JeecgBoot through 3.9.5 Missing Authorization via getDepartmentHead Endpoint
- Not ratedosv:CVE-2026-86772Snipe-IT 8.6.3 Stored XSS via Department Names
- Not ratedosv:CVE-2026-14871osTicket v1.18.3 - v1.17.7 - BOLA/IDOR in ticket field viewing allows cross-department data disclosure
- Not ratedosv:CVE-2026-44633Live Helper Chat: REST API chat update accepts arbitrary chat fields across department boundaries
- MediumCVE-2025-61309A reflected cross-site scripted (XSS) vulnerability in the dfm-menu_departments.php component of GmbH Mecury Managed Print Services (docuForm) v11.11c allows…
- MediumCVE-2025-61309Ein reflektierter Cross-Site-Scripting-Angriff (XSS) im dfm-menu_departments.
- MediumCVE-2025-61309Eine reflektierte Cross-Site-Scripting (XSS)-Schwachstelle in der Komponente dfm-menu_departments.
Other news entries
- Florida Student Aid Website Hack Puts Data of 4.9 Million People at RiskNewsSecurityWeek
- Ireland's Employment Permits Portal taken offline after unauthorised activity; names, emails and roles may be exposedBreachpwn.watch
- FBI Seizes Virtualine Domain Over Alleged Criminal Hosting and Bitcoin Money LaunderingNewsThe Hacker News
- "Icepick" leak exposes records on 41,000 DHS employees, including undercover ICE agentsBreachpwn.watch
- IT department and auditors at major pharmacy chain got into a rip-roaring fight about using 'password' on Cisco firewallNewsThe Register — Security
- U.S. Orders DeepSeek Removed From Federal Civilian Systems, Bans New PurchasesNewsThe Hacker News
- DHS bans DeepSeek products across US federal civilian agenciesNewsBleepingComputer
- FBI raids DPRK IT worker laptop farms in Texas, US nationals arrestedNewsBleepingComputer
Source: https://pwn.watch/i/florida-department-of-education-financial-aid-breach-oct-2026