- DOE staff became aware of unauthorized access to the Financial Aid Website on Oct 19.
- The incident may have affected approximately 4.9 million individuals.
- Potentially exposed information may include Social Security numbers and other personal details.
The Florida Department of Education said it discovered unauthorized criminal access to its Financial Aid Website on Oct 19.
The incident was limited to the Florida Student Financial Aid website, the department said, and may have affected approximately 4.9 million individuals. Potentially exposed information may include Social Security numbers, names, dates of birth, addresses, phone numbers, email addresses and gender identification codes.
The department said not all individuals were necessarily affected and that the information involved may vary by person. It also said current financial aid, disbursements, tuition payments and eligibility for scholarships, grants and student loans are not affected.
On this page
FLDOE secured systems after stopping the unauthorized activity
Upon identifying the threat, FLDOE said it activated cybersecurity response protocols, stopped the unauthorized activity, contained the incident and secured its systems.
The department said it is working with the Florida Digital Service and the Florida Department of Law Enforcement. It also said law enforcement was notified as part of an ongoing criminal investigation.
The financial aid site supports Florida scholarship and grant programs
The website is the online hub for Florida’s state-funded scholarship and grant programs, according to SecurityWeek.
FLDOE initiated an investigation with support from third-party cybersecurity specialists, according to teiss. At the time of that outlet’s report, no known hacker group had claimed responsibility.
The Florida incident follows a September incident at the Florida Department of Highway Safety and Motor Vehicles. SecurityWeek said that agency traced its intrusion to compromised credentials belonging to a local police department user.
teiss reported that FLDOE had not shared who was behind the incident or whether it had received a ransom demand.
FLDOE said certain websites and online services may experience temporary disruptions as part of its ongoing cybersecurity response.
What to do now
- Monitor your financial and online accounts for suspicious activity.
- Review account statements and credit reports regularly.
- Consider placing a fraud alert or credit freeze with major credit bureaus.
FAQ
What happened to the Florida Department of Education financial aid website?
FLDOE said the site experienced unauthorized criminal access. The department said it stopped the unauthorized activity, contained the incident and secured its systems.
How many people may be affected by the Florida education data breach?
FLDOE said the incident may have impacted approximately 4.9 million individuals, although not all individuals were necessarily affected.
What information may have been exposed?
Potentially exposed information may include Social Security numbers, names, dates of birth, addresses, phone numbers, email addresses and gender identification codes.
Was current Florida financial aid affected?
FLDOE said current financial aid is not at risk and that the incident will not delay financial aid disbursements or tuition payments or affect eligibility for scholarships, grants or student loans.
Who is investigating the Florida financial aid website incident?
FLDOE said law enforcement was notified and that it is partnering with the Florida Digital Service and the Florida Department of Law Enforcement. The matter remains an ongoing criminal investigation.
Sources
- Data Breach, Florida Department of EducationPrimary
- Florida Student Aid Website Hack Puts Data of 4.9 Million People at Risk, SecurityWeek
- Frontline Education Data Breach Impacts Over 1.3 Million, SecurityWeek
- Hackers breached Florida's Department of Education financial aid website, officials confirm, CBS News
- Florida warns that 4.9 million people had Social Security numbers leaked in financial aid site breach, The Record
- Florida education department says data breach may affect 4.9 million people, WPEC CBS 12
- Florida Student Financial Aid website breached, data of 4.9 million individuals exposed, teiss
How we checked this story
| Claim | Source | Status |
|---|---|---|
| FLDOE said the incident involved unauthorized criminal access to Department information. | Florida Department of Education | Confirmed |
| DOE staff became aware of the breach on October 19. | Florida Department of Education | Confirmed |
| The incident was limited to the Florida Student Financial Aid website, according to FLDOE, and may have impacted approximately 4.9 million people. | Florida Department of Education | Confirmed |
| FLDOE said the potentially exposed information may include Social Security numbers, names, birth dates, addresses, phone numbers, email addresses and gender codes. | Florida Department of Education | Confirmed |
| FLDOE said not all individuals were necessarily affected and that the specific information involved may vary by person. | Florida Department of Education | Confirmed |
| FLDOE said it activated cybersecurity response protocols, stopped the unauthorized activity, contained the incident and secured its systems. | Florida Department of Education | Confirmed |
| FLDOE is partnering with the Florida Digital Service and the Florida Department of Law Enforcement in its response. | Florida Department of Education | Confirmed |
| FLDOE said current financial aid is not at risk. | Florida Department of Education | Confirmed |
| FLDOE said the incident will not delay financial aid disbursements or tuition payments. | Florida Department of Education | Confirmed |
| FLDOE said the incident will not affect eligibility for scholarships, grants or student loans. | Florida Department of Education | Confirmed |
| FLDOE said law enforcement was notified and that the matter remains an ongoing criminal investigation. | Florida Department of Education | Confirmed |
| The FLDOE said the department notified Florida Attorney General James Uthmeier about the incident, according to CBS News. | The FLDOE, via CBS News | Attributed |
| FLDOE took the financial aid site down, according to The Record. | The Record | Attributed |
| FLDOE initiated an investigation with support from third-party cybersecurity specialists, according to teiss. | teiss | Attributed |
| No known hacker group had claimed responsibility when teiss published its report. | teiss | Attributed |
| FLDOE had not shared whether it received a ransom demand when teiss published its report. | teiss | Attributed |
| SecurityWeek reported that the website is the online hub for Florida’s state-funded scholarship and grant programs. | SecurityWeek | Attributed |
| SecurityWeek reported that Florida’s breach follows a September incident at the Florida Department of Highway Safety and Motor Vehicles. | SecurityWeek | Attributed |
| FLHSMV traced its intrusion to compromised credentials belonging to a local police department user, according to SecurityWeek. | SecurityWeek | Attributed |
| WPEC CBS 12 reported that FLDOE stopped the unauthorized activity and secured its systems after activating cybersecurity response protocols. | WPEC CBS 12 | Attributed |
| WPEC CBS 12 reported that FLDOE accepts questions at databreach@fldoe.org. | WPEC CBS 12 | Attributed |
| WPEC CBS 12 reported that the department directs people to the Federal Trade Commission’s identity theft resources. | WPEC CBS 12 | Attributed |
Could not verify
- Whether the attackers exfiltrated the potentially exposed information is not established.
- Whether the incident was exploited by a named group is not established.
- How many individuals were actually affected is not established.
- Whether a ransom demand was made is not established.



