加州教育厅：黑客经承包商系统获取数百万学生数据 ETS已开始通知家庭
加州教育厅10月16日表示，一名黑客利用该厅非营利承包商教育考试服务公司（Educational Testing Service，ETS）的系统，获取了数百万名学生的信息，包括姓名、出生日期、地址和残疾状况。教育厅称，涉事数据涵盖此前三个学年入学的全部学生；2025—2026学年加州在校生超过570万人。
据教育厅通报，ETS于9月25日在其安全文件传输站点发现入侵并展开调查，调查认定未授权方使用一组被盗登录凭证，在2026年5月22日至9月18日期间多次访问该站点并复制了含有加州学生信息的文件。ETS已于10月16日开始通知受影响学生及其家庭。教育厅表示，目前未发现相关信息被公开，社会安全号码和敏感财务信息未被访问。
ETS在加州负责包括英语熟练程度测评在内的全州统一测评。教育厅在10月2日致各县和学区官员的信中称，ETS已暂停「正常入学数据处理」。教育厅称正积极采取措施减少影响，并尽快恢复受影响的测评工作。（GSM 据路透社报道）
教育厅的事件说明另提到，受影响数据字段还包括全州学生编号、性别、族裔与504计划状态，家长与监护人的个人信息未涉及；ETS将为受影响学生与家庭提供为期两年的 Experian IdentityWorks 身份保护服务。详情见加州教育厅ETS事件说明与常见问题页。
Hacker Accessed Data of Millions of California Students via Contractor System, State Says
California's Department of Education said on October 16 that a hacker accessed the data of millions of students, including names, birth dates, addresses and disability status, by exploiting the system of its nonprofit contractor, Educational Testing Service (ETS). The data covered all students enrolled in the three previous school years; more than 5.7 million students were enrolled in California in the 2025-2026 school year.
ETS identified the breach, involving a secure file transfer protocol site, on September 25 and began an investigation, the department said. The investigation determined that an unauthorized party used a compromised login credential to access the site and copy files containing California student information at various times between May 22 and September 18, 2026. ETS began notifying students and their families on October 16. The department said ETS has not found that any of the information has been made public, and that Social Security numbers and sensitive financial information were not accessed.
In California, ETS administers statewide assessments, including those for English language proficiency. In an October 2 letter to county and district school officials, the department said ETS had stopped normal enrollment data processing, and that it was actively working to minimize disruption and resume affected assessment activities. (GSM, via Reuters)
The Department's incident notice adds that the data fields involved also included statewide student identifiers, gender, race/ethnicity and Section 504 plan status, while parents' and guardians' personal information was not involved; ETS will provide affected students and families with two years of Experian IdentityWorks identity protection services. See the California Department of Education ETS incident statement and FAQ page.
来源：GSM·美国（原文链接）
图片来源：加州州议会大厦，位于州教育厅所在地萨克拉门托 / The California State Capitol in Sacramento, home of the state Department of Education. Photo: Wikimedia Commons, Public domain.
GSM Global · 本篇英文版 English edition of this story
