Oct 21, 2026 · 26 min · 10 segments
One stolen login. Millions of children's records. And a problem that doesn't expire. In this episode we discuss the California public school breach, what was taken and then connects it to the…
It is a secure file transfer.
It's like old plumbing.
It works just fine right up until someone else has the key.
And someone did.
According to the California Department of Education, an unauthorized party used a compromised login credential at various times between May 22nd and September 18th of this year of 2026 in order to get into that site and copy files full of student information.
One credential, almost four whole months.
So from the earliest known access to discovery, you're looking at roughly four months where someone could come and go.
The state told county and district superintendents on October 2nd.
Families started getting notified on October 16th.
And those notices are expected to keep going into early of November of 2026.
Now, how many kids? The state has not given a number.
What they have said is that the information of, quote, all students enrolled in three previous school years was accessed and copied.
California reported more than 5.7 million students enrolled in public schools last year.
So do the simple math on three years of enrollment and you're already in the millions.
And wait, it doesn't stop there.
The impacted group also includes students who left a California school as far back as 2006, where the transfer to another school was never confirmed with the state.
So how did the credential get compromised, phished, reused from another breach, lifted by an info stealer on someone's laptop? The official disclosures don't say, and they don't say who did it.
If anyone online sounds very sure about how this happened, they're just guessing.
I'm not here to guess with you.
Let's talk about what actually was in those files, because this is where people either panic or just shrug.
It is a secure file transfer.
It's like old plumbing.
It works just fine right up until someone else has the key.
And someone did.
According to the California Department of Education, an unauthorized party used a compromised login credential at various times between May 22nd and September 18th of this year of 2026 in order to get into that site and copy files full of student information.
One credential, almost four whole months.
So from the earliest known access to discovery, you're looking at roughly four months where someone could come and go.
The state told county and district superintendents on October 2nd.
Families started getting notified on October 16th.
And those notices are expected to keep going into early of November of 2026.
Now, how many kids? The state has not given a number.
What they have said is that the information of, quote, all students enrolled in three previous school years was accessed and copied.
California reported more than 5.7 million students enrolled in public schools last year.
So do the simple math on three years of enrollment and you're already in the millions.
And wait, it doesn't stop there.
The impacted group also includes students who left a California school as far back as 2006, where the transfer to another school was never confirmed with the state.
So how did the credential get compromised, phished, reused from another breach, lifted by an info stealer on someone's laptop? The official disclosures don't say, and they don't say who did it.
If anyone online sounds very sure about how this happened, they're just guessing.
I'm not here to guess with you.
Let's talk about what actually was in those files, because this is where people either panic or just shrug.
The rest of this transcript — segmented and speaker-labeled, so you land on the exact moment something was said
Search every transcript — by keyword, by phrase, or by meaning, across every show Radar indexes
Trends — what is surging across podcasts, measured against its own baseline
Alerts — when a name you follow appears in a newly indexed episode
No account is needed to search Radar.