A security breach at BM Technologies — the company behind the BankMobile disbursement platform — compromised financial aid accounts at roughly 60 California community college districts in fall 2026. About 65,000 student accounts had data altered, 1,000 were actually accessed by attackers, and 400 students had funds diverted to criminals. Many students are still waiting for delayed disbursements as colleges rebuild their aid pipelines.

If your financial aid refund from a California community college hasn't arrived this semester, there's a specific reason — and it isn't your paperwork.

BM Technologies, the company formerly known as BankMobile that handles financial aid disbursements for California's community college system, was hit by a cyberattack that compromised thousands of student accounts. The breach was first identified around October 2, 2026, and the California Community Colleges chancellor's office directed colleges in October to pause disbursements through the platform entirely.1

What Actually Happened

Bad actors exploited a vulnerability in BM Technologies' digital banking platform. Roughly 60 California community college districts use it to distribute financial aid refunds — the money left over after tuition and fees are deducted from your aid package.

The attackers changed two categories of information:

  • Identity verification data — altered across approximately 65,000 accounts
  • Bank account and routing numbers — changed on about 400 accounts so that financial aid refunds would go directly to criminals instead of students

About 1,000 accounts were actually accessed by the attackers. The 65,000 figure covers a broader category: accounts where identity data points were changed, which could affect future verification and disbursement timing even for students whose money wasn't stolen.1

The Fallout for Students

The chancellor's office pause on BM Technologies disbursements is what most students are experiencing right now. Their aid isn't stolen — but it hasn't moved.

Colleges handled the workaround differently. Riverside Community College District switched to paper checks on October 8, manually cutting aid to roughly 3,400 students who normally receive direct deposits. Los Rios Community College District pointed students facing immediate hardship to its Basic Needs Center for emergency assistance.

Meanwhile, some students have been left completely in the dark. One Santa Rosa Junior College student told EdSource she had been waiting for her financial aid refund for more than a month with no clear timeline.1 For students who rely on that refund for rent, groceries, and books — not just tuition — a month without it is a real crisis.

If you attend a California community college and are expecting a financial aid refund: Log into your BM Technologies account right now and verify that your bank account number and routing number are correct. If anything looks unfamiliar, contact your financial aid office immediately — do not wait for them to reach you.

Three Things Most Coverage Missed

1. The 65,000 accounts with altered identity data aren't all clear yet. When BM Technologies asks students to re-verify their identity to restore access, students whose verification data was changed may face extra delays or complications. That's a much larger group than the 400 who lost money.

2. Switching to paper checks creates a second problem for unstable-housing students. Paper checks fix the routing-number issue, but they assume you have a reliable mailing address. California community colleges enroll a significant number of students experiencing housing instability — couch-surfing, moving frequently, living in cars. A check sent to an old dorm room doesn't reach them.

3. BM Technologies serves campuses nationwide — not just California. The company processes financial aid disbursements for institutions across the country. California's community college system is a large, concentrated customer base, which is why this breach surfaced here first. If your college uses BM Technologies for disbursements — anywhere in the country — it's worth checking whether your account information is accurate.

What to Do Right Now

Whether you're directly affected or not:

  1. Log in to your BM Technologies account and confirm your bank account number and routing number match your actual bank. If the platform is paused for your college, ask your financial aid office when access will be restored.

  2. Contact your financial aid office if your refund is more than two weeks late. They can tell you whether your college has switched to paper checks, what the current disbursement timeline is, and whether your account was flagged during the investigation.

  3. Ask about emergency funds if you're in immediate need. Most California community colleges have Basic Needs programs or emergency aid funds. You don't have to wait for the BM Technologies situation to resolve — these funds exist for exactly this kind of gap.

  4. Document everything. If your money was actually diverted, you'll want records: the expected disbursement date, what your bank account information showed on specific dates, and all communications from your college or BM Technologies.

This isn't the first campus data incident this year. The Canvas/Instructure data breach in May 2026 exposed millions of students' records across the country, and the Columbia University breach settlement showed that these cases can pay out — but only if affected people file claims while the window is open.

If a FAFSA you filed is connected to any of these aid systems, it carries your Social Security number and financial account information. It's a reasonable time to check your credit report at AnnualCreditReport.com — a free freeze with Equifax, Experian, and TransUnion costs nothing and can be lifted in minutes.

For students managing federal or private student loans on top of this delay: a delayed financial aid refund is not the same as a missed loan payment. Contact your servicer before anything is due, and ask about hardship options if the delay is pushing you close to a due date.

California community colleges have been expanding access in meaningful ways — including a push to offer more bachelor's degrees — but those gains mean nothing if the financial infrastructure can't deliver aid reliably. For students waiting on their money right now, the most important step is reaching out to your financial aid office today.

2

Footnotes

  1. EdSource. (2026, October 30). Bank breach delays financial aid, forces California college students to choose between books or food. EdSource. https://edsource.org/2026/california-bankmobile-security-breach/769422 ↩ ↩2 ↩3

  2. LAist. (2026, October 30). Bank breach delays financial aid, forces California college students to choose between books or food. LAist. https://laist.com/news/education/bank-breach-delays-financial-aid-college-students ↩