If you ever applied for Florida financial aid, assume your Social Security number, date of birth and home address are exposed. The Florida Department of Education confirmed that attackers breached its Florida Student Financial Aid website, affecting about 4.9 million people. Freeze your credit, get an IRS IP PIN, watch for phishing, and remove your details from data broker sites.
Worried you're exposed? Find out in 60 seconds with a free exposure scan.
Run a free scanOn this page
What Happened in the Florida Department of Education Data Breach
The Florida Department of Education (FLDOE) says staff discovered unauthorized access to its Florida Student Financial Aid website, FloridaStudentFinancialAidSG.org, on October 19, 2026. The department announced the incident publicly on October 30, took the site offline, and is investigating with the Florida Digital Service and the Florida Department of Law Enforcement. It has also reported the breach to the Florida Attorney General.
FLDOE puts the number of people potentially affected at about 4.9 million. That makes it one of the largest state-government breaches of 2026. The department believes the intrusion was limited to the financial aid website. It has not said who was behind the attack or how they got in, and no known hacker group had claimed responsibility at the time of the announcement.
What Data Was Exposed
According to FLDOE and reporting by The Record, the records at risk include:
- Social Security numbers
- First and last names
- Dates of birth
- Home addresses
- Phone numbers, including mobile numbers
- Email addresses
- Gender identification codes
Anyone who previously applied for Florida state financial aid through the site may be affected. That includes students who filed the Florida Financial Aid Application for state scholarships and grants, and many of them were minors or recent high school graduates when they applied. FLDOE says the breach will not delay aid disbursements or tuition payments and does not affect eligibility for scholarships, grants or student loans.
Why This Breach Is High Risk
A Social Security number, full name and date of birth together are everything a criminal needs to open new credit, file a fraudulent tax return or apply for loans in your name. Young applicants are especially exposed: many have thin or no credit files, so fraud can go unnoticed for years until they apply for their first car loan or apartment.
Is FLDOE Offering Free Credit Monitoring?
As of early November 2026, FLDOE has not announced a free credit monitoring program, and it has not confirmed that every affected person will receive an individual notification letter. Its advice so far is to monitor credit reports and financial accounts and to consider a fraud alert or credit freeze. Questions go to databreach@fldoe.org. Check the official notice at fldoe.org/databreach.stml for updates rather than trusting any email or text that claims to offer monitoring.
Step 1 of 5: Freeze Your Credit at All Three Bureaus
A credit freeze is the single most effective defense against new-account fraud, and it is free. Freeze your file at Equifax, Experian and TransUnion; our guide on freezing your credit at all three bureaus walks through each one. If your child applied for Florida aid while under 18, or still has no credit history, freeze their credit too. A freeze does not affect your credit score, and you can lift it temporarily when you need to apply for credit.
Step 2 of 5: Get an IRS Identity Protection PIN
Stolen Social Security numbers are a favorite tool for tax refund fraud. Request an Identity Protection PIN through your IRS online account. Once you have one, nobody can e-file a federal return under your SSN without that six-digit code. The PIN changes every year, so keep it somewhere safe.
Step 3 of 5: Watch for Breach-Themed Phishing
Expect fake "FLDOE breach notification" emails and texts asking you to verify your SSN, update your aid information or enroll in credit monitoring through a link. Phone numbers and emails were part of the stolen data, so the scammers already know how to reach you. FLDOE will not ask for your full Social Security number by email or text. Go directly to fldoe.org instead of clicking links, and be wary of calls claiming to be from your school's financial aid office or a student loan servicer.
Step 4 of 5: Monitor Your Credit Reports and Accounts
Pull your free weekly credit reports at AnnualCreditReport.com and look for accounts, inquiries or addresses you do not recognize. Check bank and card statements, and review your StudentAid.gov account for loans you did not request. If you find fraud, report it at IdentityTheft.gov to get a recovery plan, and see our full guide on what to do if your Social Security number is leaked.
Step 5 of 5: Remove Your Details From Data Broker Sites
Criminals rarely use one breach alone. They combine stolen records with the addresses, relatives, phone numbers and ages that people-search sites publish openly, which makes impersonation and social engineering far more convincing. Removing your profile from those sites cuts off the data that turns a leaked SSN into a working identity. You can opt out manually site by site, or compare the best data removal services that do it for you.
How PrivacyOn Helps After the Florida Breach
PrivacyOn removes your personal information from 100+ data broker and people-search sites, keeps monitoring for new listings 24/7, and alerts you when your email or Social Security number appears on the dark web. Family plans cover up to five people, which suits households where parents and several students all applied for aid. Plans start at $8.33 a month. Run a free scan to see where your information is exposed right now.
Free scan
Is your data already out there?
Leaked data ends up on broker sites and in scammers' hands. Run a free 60-second scan to see your exposure — then let us remove it.
Frequently Asked Questions
How many people were affected by the Florida Department of Education data breach?
FLDOE says about 4.9 million people may be affected. The breach involved the Florida Student Financial Aid website, so anyone who previously applied for Florida state financial aid through that site should assume their information may be exposed.
What information was stolen in the Florida financial aid breach?
The exposed data may include Social Security numbers, names, dates of birth, home addresses, phone numbers, email addresses and gender identification codes. FLDOE has not reported that bank account or payment card numbers were involved.
Will the breach affect my Bright Futures scholarship or financial aid?
No. FLDOE says the breach will not delay financial aid disbursements or tuition payments, and it does not change eligibility for scholarships, grants or student loans. The risk is identity theft, not loss of aid.
Is Florida offering free credit monitoring for the breach?
As of early November 2026, FLDOE had not announced a free credit monitoring offer. A credit freeze at all three bureaus is free and more protective than monitoring anyway, because it blocks new accounts instead of alerting you after one is opened.
How do I know if a breach notice from FLDOE is real?
Do not click links in unexpected emails or texts. Go directly to fldoe.org and look for the official data breach page, or email databreach@fldoe.org. A real notice will not ask you to confirm your full Social Security number.
What is the best way to protect myself long term after this breach?
Keep your credit frozen, use an IRS IP PIN every tax season, and take your personal details off data broker sites so criminals cannot fill in the gaps around your stolen SSN. PrivacyOn automates broker removals across 100+ sites and adds dark web monitoring, and you can start with a free scan.