Short answer
Florida's Department of Education said it became aware on 19 October 2026 of unauthorized access to its Florida Student Financial Aid website. It announced on 29 October that about 4.9 million people may be affected, and says the incident was limited to that site.
If you think your details were included, start with our checklist on what to do after a data breach.
Key facts
| Organization | Florida Department of Education (FLDOE) |
|---|---|
| Incident type | Data breach |
| Status | Confirmed by the organization |
| Sector | Government, education |
| Country | United States |
| Detected | 2026-10-19 |
| Disclosed | 2026-10-29 |
| People or records affected | Up to about 4.9 million people who applied for Florida financial aid, per FLDOE |
What data was exposed
- Names and Social Security numbers
- Dates of birth and gender codes
- Home addresses, phone numbers and email addresses
What happened
The Florida Department of Education (FLDOE) says its staff became aware on 19 October 2026 that an unauthorized party had gained access to the Florida Student Financial Aid website. On 29 October the department announced that the incident may affect about 4.9 million people. The Record reported it the next day, and SecurityWeek followed on 2 November.
FLDOE says the incident was limited to that one website and has been contained. It took the site offline, reported the incident to the state Attorney General, and is working with the Florida Digital Service and the Florida Department of Law Enforcement. The department has not said how the attacker got in, and it declined to comment on who was behind it.
What was exposed
According to FLDOE, the information includes names, Social Security numbers, dates of birth, home addresses, phone numbers, email addresses and gender codes. The department says the fields exposed can differ from person to person. The 4.9 million figure is described in coverage as potential, since the investigation was still working out how much was accessed.
Effect on students
FLDOE says current aid is safe. It says disbursements and tuition payments will not be delayed, and eligibility for scholarships, grants and student loans is unaffected. Some other department websites and services may see temporary disruption while the site is rebuilt.
Why Social Security numbers matter
A Social Security number combined with a date of birth and an address is enough for many identity theft attempts, such as opening credit in someone else’s name or filing a false tax return. Unlike a password, it cannot be changed easily, so a credit freeze is the most direct protection. Scammers also tend to follow public breach news with messages that reference it, so be cautious with anything about “your financial aid account.”
What FLDOE advises
The department urges people to monitor financial accounts and credit reports, consider a fraud alert or credit freeze, and use the FTC’s IdentityTheft.gov for guidance. It is posting updates on its data breach page.
This is the second large Florida government incident reported this year. See also the California student data breach from the same month.
For next steps, read our data breach checklist. Fake official notices are covered in our guide to government impersonation scams.
Scams to watch for after this breach
Criminals use breach news as cover. Expect messages that mention the incident, quote real details, or offer help.
- Calls, texts or emails posing as the state, a college or the Department of Education about 'verifying' your financial aid, asking for a Social Security number or a fee.
- Identity theft attempts such as new credit applications or tax return fraud using the exposed Social Security number and date of birth.
- Fake 'credit monitoring' or 'breach compensation' offers that link to a payment or login page.
What to do if you are affected
- 01Check whether you ever applied for Florida state financial aid. Anyone who did may be affected, and not everyone's data was necessarily taken.
- 02Place a free fraud alert or credit freeze with the three credit bureaus, and review your credit reports at AnnualCreditReport.com.
- 03Watch bank and card statements for unfamiliar activity, and file an identity theft report at IdentityTheft.gov if something looks wrong.
- 04Treat any unexpected message about your aid or this breach as suspect. Go to the official FLDOE website yourself instead of using a link or phone number you were sent.
- 05Questions can go to databreach@fldoe.org, the contact FLDOE has published.
Frequently asked questions
Who is affected by the Florida financial aid breach?
FLDOE says anyone who has applied for Florida state financial aid in the past may be affected, up to about 4.9 million people. It says not everyone was necessarily affected and the exposed fields can vary by person.
Will my financial aid or tuition payment be delayed?
FLDOE says disbursements, tuition payments and eligibility for scholarships, grants and loans are not affected. It took the site offline and warned that other department websites may see temporary disruptions.
Has anyone claimed responsibility?
As of SecurityWeek's 2 November report, no threat group had publicly claimed the attack, and FLDOE had not said how the intruders got in or who they were. The Florida Digital Service and the Florida Department of Law Enforcement are assisting.
Is this linked to the Florida driver database incident?
No link has been reported. SecurityWeek mentioned a separate September incident at the state highway safety department only as context and did not tie it to this breach.
Sources
- Florida education data breach may have exposed Social Security numbers of 4.9 million people, WPTV, 2026-10-29
- Florida warns that 4.9 million people had Social Security numbers leaked in financial aid site breach, The Record, 2026-10-30
- Florida Student Aid Website Hack Puts Data of 4.9 Million People at Risk, SecurityWeek, 2026-11-02
This post summarises public reporting as of 2026-11-06. Details of live incidents change; we update posts when the organization or regulators publish new facts. Spot an error? See our editorial and corrections policy.