Post

Summit Public Schools Breach Exposes 115 GB of Student and Staff Data

Summit Public Schools Breach Exposes 115 GB of Student and Staff Data

Summit Public Schools Data Breach 🚨

A hacker has leaked 115 GB of data from Summit Public Schools, exposing billions of lines of personal records of students and staff, including approximately 21,000 email addresses. The leaked information includes names, home addresses, birth dates, phone numbers, parental details, and school records of thousands of individuals.

The files surfaced on PwnForums on October 22, 2026, posted by an account named Sp1d3yG0nz4l3s. This account claimed to have breached the organization’s cloud environment and described the release as part of a larger collection. Hackread.com’s review confirms the data volume at 115 GB, identifying the email addresses among the leaked information.

Summit Public Schools operates in California and Washington. The leaked files include records from various campuses, including Summit Tamalpais. The data comprises full names, dates of birth, residential and mailing addresses, gender, ethnicity, student identification numbers, and enrollment information. Some entries also contain graduation years and administrative records.

Key Details:

  • California PowerSchool Folder: Contains files like TEACHERS.csv (15.82 GB) and USERS.csv (8.06 GB).
  • Washington Folder: Includes six exports covering students, teachers, and users, with the largest file being STUDENTS.csv (35.12 GB).
  • Clever Directory: Organized under six education-service names, including Khan Academy and Lexia Core5.

The breach was reportedly due to an unspecified critical vulnerability that allowed access to Summit’s cloud environment in October. The hacker claimed the vulnerability was patched shortly after the organization was notified, but no technical details or CVE identifier were provided.

Important Note: Anyone receiving messages related to these records should verify requests directly with their school, especially those asking for passwords, payments, or personal details.

For more details, you can read the full article here: Read full article

This post is licensed under CC BY 4.0 by the author.