Florida Financial Aid Data Breach Hits 4.9M

If you have ever applied for Florida state financial aid, your personal information may be in the hands of criminals right now.

The Florida Department of Education confirmed Thursday that hackers gained unauthorized access to its financial aid website, FloridaStudentFinancialAidSG.org. Staff discovered the breach on October 19, 2026. The department said in a news release it "became aware of a data breach incident involving unauthorized criminal access to the Financial Aid Website."

The breach may have exposed Social Security numbers and other personal information belonging to approximately 4.9 million people.¹ That number includes former financial aid applicants, not just current students — meaning people who applied for Florida state aid years ago could be affected even if they are no longer enrolled anywhere.

What Data Was Exposed

The Florida Department of Education confirmed Social Security numbers were among the compromised data. Officials have not publicly specified what other types of personal information were exposed. The state's Department of Law Enforcement and Florida Digital Service are conducting a criminal investigation. No suspect has been publicly identified.

Is Your Financial Aid Still Safe?

Yes. Your current financial aid is not at risk. The department was direct: the breach will not affect financial aid disbursements, tuition payments, or eligibility for scholarships, grants, or student loans from the Florida Department of Education.²

This matters because the first question most students and parents ask is whether their aid check is coming. It is. The breach exposed stored personal data, not the systems that process your aid.

If you are currently completing the FAFSA for 2027-28, that is a separate federal system at StudentAid.gov that was not involved in this breach. Florida's state financial aid portal and the federal FAFSA are entirely different systems.

What You Need to Do Right Now

The threat is not over just because the breach has been announced. When Social Security numbers are exposed, here is what matters:

1. Pull your credit reports. Go to AnnualCreditReport.com and request reports from all three bureaus — Equifax, Experian, and TransUnion. Look for accounts you did not open and inquiries you did not authorize.

2. Place a credit freeze. A freeze blocks anyone from opening new credit in your name. It is free at all three bureaus, and you can lift it when you need to apply for credit. You must contact each bureau separately.

3. Contact databreach@fldoe.org. The Florida Department of Education has set up this address for affected individuals.

4. Watch for phishing. This is the threat most coverage underplays.

Scammers will use data from this breach to send convincing emails and texts telling you to "verify your financial aid account" or "update your login information." Those messages will look official. They will link to fake websites built to steal your username and password. Do not click links in unexpected emails about your financial aid. Go directly to FloridaStudentFinancialAidSG.org or StudentAid.gov by typing the address yourself.

The Part Nobody Mentions

Most coverage frames this as a Florida student story. That misses two things.

First, the 4.9 million figure is larger than Florida's current college enrollment because it includes everyone who has ever applied for Florida state financial aid — including people who applied years ago through the FAFSA application process and then moved, graduated, or never enrolled. If you are a parent who helped a student apply for Florida's Bright Futures scholarship in 2019, your data may be in this system.

Second, this breach is a reminder that the federal FAFSA is not the only place storing your Social Security number. Every state with its own grant and scholarship program runs a separate portal with its own security profile. Florida's FloridaStudentFinancialAidSG.org is one of dozens of state-level systems that hold SSNs independently of StudentAid.gov. If you have applied for aid in multiple states over your lifetime — as a student or as a parent — your information exists in multiple systems you probably never thought about again.

If You Are Currently Applying for Aid

The timing is rough. The 2027-28 financial aid cycle is open now, and many Florida students are in the middle of applications. Continue that process — this breach does not change it.

What changes is your awareness. Understanding how to read your financial aid award letter and appeal if your aid package comes in too low remains just as important. So does knowing about all the scholarships available beyond state grants.

But go into the season knowing your SSN may already be circulating among bad actors. That means being extra skeptical of any communication — email, text, phone call — that asks you to verify your identity or financial aid account.

Your Five-Step Response

1. Pull credit reports at AnnualCreditReport.com (free, immediate)
2. Place a credit freeze at Equifax, Experian, and TransUnion (free)
3. Email databreach@fldoe.org with questions about your specific situation
4. Delete any unsolicited message asking you to verify financial aid accounts
5. Continue FAFSA and Florida aid applications — those systems are not affected

The Florida Department of Education has not announced when it will notify affected individuals directly. The criminal investigation is ongoing.

Footnotes

1. WPTV. (2026, October 30). Florida education data breach may have exposed Social Security numbers of 4.9 million people. https://www.wptv.com/news/state/florida-education-data-breach-may-have-exposed-social-security-numbers-of-4-9-million-people ↩

2. WFLA. (2026, October 30). 4.9M people affected by Florida Department of Education data breach that includes Social Security numbers. https://www.wfla.com/news/florida/4-9m-people-affected-by-florida-department-of-education-data-breach-that-includes-social-security-numbers/ ↩