4.9 million hit in Florida aid data breach

Tallahassee, Fla. The Florida Department of Education confirmed on Thursday that a cyberattack on its student financial aid website exposed the Social Security numbers of approximately 4.9 million people. The department stated that staff identified the unauthorized criminal access on October 19. While officials confirmed the release of Social Security numbers, they did not specify what other types of personally identifiable information were compromised during the incident.

The timeline of the discovery began in mid-October when internal systems flagged unusual activity. By October 19, the department’s staff confirmed the breach involved the Florida Student Financial Aid website specifically. The agency said the intrusion appears limited to that specific online portal. Upon detection, the department activated its cybersecurity response protocols to contain the unauthorized activity and secure its systems. FLDOE also notified the Florida Attorney General’s Office immediately after confirming the scope of the problem.

The department is currently working with the Florida Digital Service and the Florida Department of Law Enforcement to investigate the incident. A criminal investigation remains open as of this report. Officials said the breach does not put current financial aid at risk. They confirmed that the incident will not delay the disbursement of funds or the processing of tuition payments from the department. Additionally, the breach will not affect a student’s eligibility for scholarships, grants, or student loans administered by FLDOE.

Although core financial functions remain stable, some department websites and online services may experience temporary disruptions. These interruptions are expected while officials work to restore full functionality to the affected systems. The department is monitoring the situation closely to minimize impact on students and families using the online portal for aid applications and status checks.

FLDOE recommends that affected individuals monitor their financial and online accounts for signs of suspicious activity. The department advises residents to review account statements and credit reports regularly. Officials also suggest considering a fraud alert or placing a credit freeze with the major credit bureaus. Consumers can obtain free credit reports through AnnualCreditReport.com. For further guidance on responding to data breaches, the department points to the Federal Trade Commission’s IdentityTheft.gov website.

Anyone with questions about the breach can contact the department directly at databreach@fldoe.org. FLDOE noted that information regarding the incident may change as the criminal investigation continues. The department is posting ongoing updates on its dedicated data breach information page to keep the public informed.