{
  "id": "florida-student-aid",
  "url": "https://ohshit.app/incidents/florida-student-aid/",
  "title": "Florida student-aid breach may affect 4.9 million people, including Social Security numbers",
  "level": 4,
  "level_name": "septic-tank-blew",
  "date": "2026-10-29",
  "date_is_approximate": false,
  "updated": null,
  "tags": [
    "Florida",
    "data breach",
    "identity theft"
  ],
  "ecosystems": [],
  "summary": "Florida’s education department confirms unauthorized access to its student financial-aid website. About 4.9 million people may be affected; potentially exposed data includes Social Security numbers. Current aid and disbursements are unaffected, according to the department.",
  "splash": "People who previously applied for financial aid in Florida",
  "wipe": "Monitor credit and financial accounts; consider a fraud alert or credit freeze through the credit bureaus",
  "in_the_wild": "yes",
  "source_exception": null,
  "cves": [],
  "fixed": [],
  "checklist": [
    {
      "title": "Check credit reports and financial accounts",
      "hint": "Use AnnualCreditReport.com and existing account bookmarks. Review unfamiliar accounts and transactions; follow identitytheft.gov/databreach if you find misuse."
    },
    {
      "title": "Consider a credit freeze or fraud alert",
      "hint": "Contact Equifax, Experian and TransUnion through their official sites. Questions about this incident can go to databreach@fldoe.org. Do not submit identity documents to unsolicited contacts."
    }
  ],
  "sources": [
    {
      "name": "FLDOE breach FAQ",
      "url": "https://www.fldoe.org/databreach.stml",
      "says": "Potentially affected population and recommended precautions; investigation continues.",
      "primary": true
    },
    {
      "name": "FLDOE public acknowledgment",
      "url": "https://publish.twitter.com/oembed?url=https%3A%2F%2Fx.com%2FEducationFL%2Fstatus%2F2115821380356763776&omit_script=true",
      "says": "Official October 29 acknowledgment anchors public disclosure, distinct from detection.",
      "primary": true
    }
  ],
  "headline": null,
  "one_liner": null,
  "in_the_wild_note": "FLDOE confirms criminal access; individual exposure remains under investigation.",
  "mitigation": null,
  "timeline": [
    {
      "date": "Oct 19, 2026",
      "title": "Department becomes aware of the intrusion"
    },
    {
      "date": "Oct 29, 2026",
      "title": "Public acknowledgment and breach guidance"
    }
  ],
  "body_markdown": "The FAQ identifies FloridaStudentFinancialAidSG.org. Potential data includes names, birth dates, addresses, phone numbers, emails and gender codes as well as Social Security numbers; exposure varies by person. The entry point is unspecified. No final victim count or confirmed misuse is established. L4 reflects the potential scale and sensitivity."
}