Statewide Notice: ETS Assessment Data Security Incident

Dear Orcutt Union School District Families,
We want to make you aware of a recent data security incident involving Educational Testing Service (ETS). The State of California contracts with ETS to run statewide student testing for all California public schools, including the California Assessment of Student Performance and Progress (CAASPP) and the English Language Proficiency Assessments for California (ELPAC). Because this incident may affect students across the state, we are passing this information along to keep our families informed.
This incident occurred within the ETS system and did not involve a breach of Orcutt Union School District’s systems. We are sharing this information with all OUSD families as a precaution and so that our school community is aware of the incident. Receiving this communication does not mean your student’s information was confirmed to be involved.
What Happened?
On September 25, 2026, ETS identified unauthorized activity involving a secure file transfer system used to exchange statewide student assessment information with the California Department of Education (CDE).
An investigation determined that an unauthorized individual used compromised login credentials to access and copy files containing California student information between May 22 and September 18, 2026.
The incident potentially affects current and former California public school students, including students enrolled during the previous three school years.
What Information Was Involved?
The information accessed varies by student but may include:

• Student name, date of birth, address, school, district, and grade level;
• State and local student identification numbers;
• Demographic information, including primary language and English learner status;
• Special education or Section 504 status and testing accommodations;
• Participation in certain educational programs; and
• Statewide assessment participation and results.

The information did not include Social Security numbers, financial account information, credit or debit card information, passwords, or parent/guardian personal information.
How Will I Know If My Student Was Affected?
ETS, at the direction of the California Department of Education, is responsible for directly notifying students and families whose information was identified as having been accessed and copied.
If your student was identified as affected, you should receive a separate official notification from ETS. That notification will provide more information about the incident and instructions for accessing complimentary identity-protection services.
Please note that this district-wide communication is informational and is not confirmation that your student’s information was compromised.

Please be cautious of unexpected emails, texts, or calls about this incident. ETS and Orcutt Union School District will never ask you for passwords or payment information. If you receive a suspicious message, do not click any links; please use the CDE webpage below instead.

What Is Being Done?
ETS has taken steps to secure its systems, investigate the incident, and put additional security measures in place. According to ETS, ongoing monitoring has not found evidence that the accessed information has been made publicly available.
The California Department of Education and other state agencies are also working with cybersecurity experts to review the incident and support affected individuals.
ETS is offering two years of complimentary Experian IdentityWorks identity-protection services to affected current and former students. Enrollment information will be included in the official ETS notification and is also available on the CDE website at https://www.cde.ca.gov/ets. No credit card information is required.
Where Can I Find More Information?
For the most current information about this incident, please visit the California Department of Education’s dedicated webpage: https://www.cde.ca.gov/ets
Families may also contact ETS directly at 833-931-8488, Monday through Friday, 6:00 a.m. to 6:00 p.m. Pacific Time, excluding major U.S. holidays.
When calling, please reference the appropriate engagement number:

• B174774 – Students under 18
• B174775 – Students 18 or older

We recognize how important it is to protect student information, and we understand that news of a data security incident may raise questions or concerns. Orcutt Union School District remains committed to safeguarding student information and will continue to share relevant updates as they become available.

Sincerely,
Orcutt Union School District