Florida Student Aid Website Hack Puts Data of 4.9 Million People at Risk

What it is

The Florida Department of Education (FLDOE) disclosed that attackers breached the Florida Student Financial Aid website (FloridaStudentFinancialAidSG.org), the online hub for the state's scholarship and grant programs. FLDOE says it found the intrusion on 19 October 2026 and has contained it. About 4.9 million people may be affected.

Preconditions / Affected

FLDOE says anyone who has applied for financial aid in Florida in the past could be among those affected. It also says not everyone was necessarily affected, and the data involved varies by person. The data types it lists are names, Social Security numbers, dates of birth, home addresses, phone numbers, email addresses and gender codes. FLDOE believes the incident was limited to this one website.

What to do

The page gives no remediation steps, indicators of compromise or notification instructions for affected people. It states the following operational points:

• FLDOE says existing aid is safe. Disbursements and tuition payments will not be delayed, and eligibility for its scholarships, grants and student loans will not change.
• Some FLDOE websites and online services may be disrupted while remediation continues.
• The Florida Digital Service and the Florida Department of Law Enforcement are assisting with the response.

Caveats

FLDOE has not said how the attackers got in or who is responsible, and no threat group appears to have publicly claimed the attack.

The article links the incident to the September 2026 breach at the Florida Department of Highway Safety and Motor Vehicles (FLHSMV). That agency traced its intrusion to compromised credentials belonging to a local police department user. The ShinyHunters extortion group claimed to have stolen more than 200,000 driver records, but FLHSMV did not name the group. The article does not say the two breaches share a cause or an actor.