Important Notice Regarding ETS Student Data Breach
Dear Gateway Community Charters Families,
Gateway Community Charters (GCC) is sharing important information about a data security incident involving Educational Testing Service (ETS), a company contracted by the California Department of Education (CDE) to administer statewide assessments, including CAASPP and ELPAC.
On October 16, 2026, CDE notified California school districts of the incident, which involved unauthorized access to student information maintained by ETS.
Important: The incident did not involve Gateway Community Charters' systems.
We are sharing this information to help families understand what happened, what information may have been affected, and where to find additional information and support.
What Happened?
On September 25, 2026, ETS identified unauthorized activity on a secure file transfer site used to exchange statewide assessment information with CDE.
An investigation determined that an unauthorized individual used compromised login credentials to access and copy files containing California student information between May 22 and September 18, 2026.
According to CDE, the affected information includes records involving students enrolled in California public schools during the previous three school years, among others.
What Information Was Involved?
The information varies by student but may include:
- Student name, date of birth, home address, school, district, and grade level
- Statewide Student Identifier (SSID) and local student identification number
- Gender, race or ethnicity, primary language, country of origin, and English learner status
- Disability and Section 504 status, testing accommodations, and primary disability type
- Eligibility for certain federal and state programs
- English language proficiency information and statewide assessment registration, participation, and results, where applicable
According to ETS, the compromised information did not include Social Security numbers, financial account information, passwords, or personal information about parents or guardians.
How Are ETS and CDE Responding?
ETS took the affected system offline, disabled the compromised account, and initiated an investigation with external cybersecurity experts. ETS has also implemented additional security measures.
As of CDE's October 16 update, ETS reported no evidence that the information had been made publicly available.
ETS, at the direction of CDE, is responsible for directly notifying affected current and former students and families. Notifications began October 16 and are expected to continue through early November 2026.
ETS is also offering affected individuals two years of complimentary identity-protection services through Experian IdentityWorks.
Details about the services, including enrollment instructions for minors and adults, are included in the official Notice of Data Breach , available through the California Department of Education.
The notice is available in 27 languages.
Where Can Families Find More Information?
For official updates, frequently asked questions, and additional resources, please visit the California Department of Education's ETS Incident Information Page .
Families with questions about the incident or available identity-protection services may also contact ETS at 833-931-8488 , Monday through Friday, from 6:00 a.m. to 6:00 p.m. local time.
We understand that news of a data security incident involving student information can be concerning. While this incident occurred within a system operated by a state-contracted vendor, protecting student privacy remains an important priority for Gateway Community Charters.
We are committed to keeping our families informed and ensuring you have access to accurate information and available resources.
Frequently Asked Questions (FAQs)
Select a question below to view the answer.
Was my student's information affected?
According to CDE, the incident involved student information from the previous three school years, among other records. However, GCC does not have confirmation about which individual students' information was included in the files accessed.
ETS is responsible for notifying affected individuals directly. Families who have questions about their student's information can contact ETS at 833-931-8488.
Will I receive a notification if my student's information was affected?
ETS is sending direct notifications to identified affected current and former students and families. Notifications began October 16 and are expected to continue through early November 2026.
Not receiving a notification does not necessarily mean your student's information was unaffected.
What should families do?
Families are encouraged to review the official information provided by CDE and remain cautious of unexpected emails, text messages, or phone calls referencing the incident.
Do not share personal or financial information in response to unsolicited requests.
If you receive a notification from ETS, review the instructions for accessing the identity-protection services being offered.
Where can I learn more?
Families can access official information, updates, and frequently asked questions through the CDE ETS Incident Information Page .
For questions about the incident or identity-protection services, contact:
ETS Information Line:
833-931-8488
Monday-Friday, 6:00 a.m.-6:00 p.m. local time
CDE Email:
SecurityIncident@cde.ca.gov
