The Florida Department of Education says a breach of its student financial aid website may have affected approximately 4.9 million people. The figure describes potential exposure, not confirmation that the same information was stolen from every person in that group.
In its breach notice, the department says the incident appears limited to FloridaStudentFinancialAidSG.org and that the investigation is continuing. Anyone who previously applied for financial aid in the state could potentially be affected.
The incident predates this week’s coverage
Local reporting on October 29 said staff discovered the unauthorized access on October 19. SecurityWeek’s November 2 report subsequently detailed the scale of possible exposure. The later publication date should not be confused with the date the intrusion was discovered.
SecurityWeek reports that potentially exposed records include names, Social Security numbers, dates of birth and contact details. The department has cautioned that the information involved can vary by person. The public reporting does not establish the exact records taken from each individual.
Aid services and personal-data risk are separate questions
The department says current aid is not at risk and that the incident will not change eligibility for the scholarships, grants or student loans it administers. It has also said the payments it handles are not expected to be delayed by the breach.
Santa Fe College has posted an update for students saying its own systems were not affected. That distinction matters: the disclosed incident concerns a state financial-aid service and should not be described as a compromise of every participating college.
FLDOE says it activated its response procedures, contained the unauthorized activity and is working with the Florida Digital Service and the Florida Department of Law Enforcement. How the attackers gained access and the final number of affected people remain open questions.
Where applicants can find updates
The department’s official incident page is the central source for continuing information. It advises previous applicants to monitor credit reports and financial accounts and provides a support address, databreach@fldoe.org. Applicants should use the department’s published channels rather than send personal records in response to unsolicited messages.
Sources: FLDOE incident notice, SecurityWeek, WFTV and Santa Fe College.
Image: AI-generated editorial illustration created for DaySec, not a photograph of the incident.
