Student Aid Portal Breach Exposes Social Security Numbers for 4.9M
The Florida Department of Education detected the unauthorized access on Oct. 19 and is warning applicants to monitor financial accounts.
By Sarah Montgomery ·
Florida's student financial aid portal may have leaked sensitive personal data for up to 4.9 million people, including Social Security numbers that could be used to open credit accounts or file fraudulent tax returns.
The state Department of Education said it found the unauthorized access on Oct. 19. The incident involves FloridaStudentFinancialAidSG.org, the platform used to process applications for scholarships, grants and other student aid programs.
The agency has not published a complete list of the types of information exposed or identified every individual affected. There is no public roster confirming who was impacted.
Applicants who have used the state portal to seek aid should pay close attention, including students who applied for scholarships or grants through the site and anyone else whose data may sit in the system. Bright Futures, which provides scholarships to eligible Florida students, is one of the programs associated with this kind of assistance, but the state has not confirmed whether every participant in that program was affected.
The Department of Education said the breach does not put current financial aid at risk. Disbursements and tuition payments managed by the agency will not be delayed, and eligibility for state scholarships, grants and student loans is unchanged. Some websites and online services may experience brief interruptions while systems are secured and restored.
Because there is no confirmed list of affected individuals, people who applied for aid through the portal should take precautions now rather than wait for suspicious activity to appear. Review bank statements, credit card activity and other financial accounts for unrecognized purchases, withdrawals, credit applications or notifications. Report anything unusual to the financial institution.
Free credit reports are available at AnnualCreditReport.com, the federally authorized site for reports from the three major credit agencies, or by calling 1-877-322-8228. The reports show whether accounts, loans or credit inquiries appear that the account holder did not authorize.
A credit freeze is another option when Social Security numbers may be exposed. The freeze restricts access to a credit file and makes it harder for someone to open new credit in that name. It is free, does not affect a credit score, and can be lifted temporarily when a loan or other credit review is needed. The freeze must be requested separately from Equifax, Experian and TransUnion. A fraud alert, which asks companies to verify identity before granting new credit, is also available.
Messages and calls that arrive unexpectedly after a breach can be attempts to extract Social Security numbers, passwords or verification codes. Do not share those details or open links from unsolicited contacts, and do not pay anyone who claims to remove data from the incident. Verify any communication by contacting the institution directly through official channels.
The Federal Trade Commission operates identitytheft.gov for reporting identity theft and receiving a recovery plan. Florida's Department of Education set up a page for questions about the incident and can be reached at [email protected].
