// UNCLASSIFIED // CLEARED FOR PUBLIC RELEASE //
FILE BRC-newsDTG 0600Z
ColdRecon / Breach Radar / standardized testing company
Breach Record

standardized testing company

DISCLOSED 2026-10-20 · STOLEN CREDS

A cyber criminal used a compromised login credential to hack a standardized testing company in September. The breach exposed names, birthdates, addresses, and disability records of millions of California students.

The record

What we know

Disclosed
2026-10-20
Attack vector
Stolen Creds
Sector
education
Country
USA
Data classes exposed
namesbirthdatesaddressesdisability records
Sources

Cited reporting

↗ www.govtech.com
Similar vector · recent

Other stolen creds breaches on file

Nikkei · 2026-10-20 Danish national registry · 2026-10-18 Denmark's Central Register of Persons (CPR) · 2026-10-17 Danish national registry · 2026-10-16 Pays ApS · 2026-10-16 Danish national registry · 2026-10-15 Pays ApS · 2026-10-15 Danish national registry · 2026-10-14

This page is the permanent ColdRecon entry for the standardized testing company disclosure. It updates if new public reporting emerges. All tracked breaches →

standardized testing company just lived through this. Your next prospect doesn't have to.

ColdRecon turns every disclosed breach into a daily intelligence brief from the seller's seat — normalized to the factors that move a deal, written in the Handler's voice. Request clearance and the first lands tomorrow at 0600.

Request Clearance →