[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fqg9nvhcjxhnx":3},{"success":4,"breach":5},true,{"_id":6,"name":7,"title":8,"slug":9,"domain":10,"breachDate":11,"addedDate":12,"modifiedDate":13,"contentUpdatedAt":13,"source":14,"sourceUrl":15,"sourceUrls":16,"pwnCount":19,"affectedCount":19,"affectedCountStatus":20,"affectedCountLowerBound":19,"affectedCountUnit":20,"hasEnglishDescription":4,"severity":21,"dataClasses":22,"description":30,"seoTitle":31,"seoTitleEn":8,"seoDescription":31,"seoDescriptionEn":32,"logoUrl":33,"isVerified":4,"isSensitive":4,"isSpamList":34,"isMalware":34,"company":35},"6a6f620bdf64d1deee20a308","DCPublicSchools2026","DC Public Schools 2026 Data Breach","dc-public-schools-2026","dcps.dc.gov","2026-07-01T00:00:00.000Z","2026-08-02T15:28:11.337Z","2026-08-02T15:29:37.073Z","Official family notification","https:\u002F\u002Fwww.nbcwashington.com\u002Fnews\u002Flocal\u002Fdcps-data-breach-potentially-exposed-students-names-addresses-birthdays\u002F4136249\u002F",[15,17,18],"https:\u002F\u002Fwww.wusa9.com\u002Farticle\u002Fnews\u002Feducation\u002Fdc-public-schools-notifies-families-about-possible-student-data-breach\u002F65-f267b4b6-5874-4af5-9582-cfae6190e868","https:\u002F\u002Fdcps.dc.gov\u002Fsites\u002Fdefault\u002Ffiles\u002Fdc\u002Fsites\u002Fdcps\u002Fpage_content\u002Fattachments\u002FList%20of%20OSTP%20Schools%20SY26-27%20English.pdf",null,"unknown","Unknown",[23,24,25,26,27,28,29],"Names","Student IDs","Dates of birth","School information","School grades (class levels)","Physical addresses","Phone numbers","\u003Cp>\u003Cstrong>The DC Public Schools 2026 data breach\u003C\u002Fstrong> concerns possible unauthorized third-party access to a web application used for summer-learning and after-school registration. In late July 2026, DCPS said student and family information may have been exposed.\u003C\u002Fp>\n\u003Cp>The application was associated with students from 55 schools, but DCPS did not disclose an affected-student count. The catalog therefore does not display zero; 55 describes school coverage and is not converted into a people count.\u003C\u002Fp>\n\u003Ch2>How Was the DCPS Breach Verified?\u003C\u002Fh2>\n\u003Cp>A letter DCPS sent to families described possible unauthorized access to information in the web application and listed the potentially affected data categories. DCPS said it engaged the D.C. Office of the Chief Technology Officer, removed student data from the application, and notified law enforcement.\u003C\u002Fp>\n\u003Cp>NBC4 Washington reported the letter and statements from DCPS officials in detail. WUSA9 independently confirmed that families were notified about a possible cybersecurity incident, while the FBI said it was coordinating with partners.\u003C\u002Fp>\n\u003Ch2>What Happened in July 2026?\u003C\u002Fh2>\n\u003Cp>An unauthorized third party may have accessed information in the web application used for DCPS Summer Learning registration. The application held information related to students in after-school and summer programs, mainly at elementary schools.\u003C\u002Fp>\n\u003Cp>DCPS did not disclose the day of initial access, how long access lasted, or the intrusion method. July 1 is used only as a month-level catalog placeholder and is not presented as the attack or discovery day.\u003C\u002Fp>\n\u003Ch2>What Information May Have Been Exposed?\u003C\u002Fh2>\n\u003Cp>The listed data types are student names, student identification numbers, dates of birth, schools and grade levels, parent or guardian names, home addresses, and phone numbers. The sources do not establish that every field was present for every student.\u003C\u002Fp>\n\u003Cp>Social Security numbers, financial information, passwords, and medical records were not among the categories disclosed for this incident. Data types absent from the sources were not added based on risk assumptions.\u003C\u002Fp>\n\u003Ch2>How Many Students Were Affected?\u003C\u002Fh2>\n\u003Cp>DCPS did not publish a definitive student or family count. Officials said the incident involved an application containing information from 55 schools; that figure describes participating schools, not affected people.\u003C\u002Fp>\n\u003Cp>Because no verified public people count is available, the affected count is marked as not disclosed. News references to “thousands of students” are not a precise, deduplicated measurement and are not used as the catalog count.\u003C\u002Fp>\n\u003Ch2>Why Is Children's Data Sensitive?\u003C\u002Fh2>\n\u003Cp>A student's name, date of birth, school, grade level, and home address can be combined to create messages that appear specifically tailored to the child or guardian. Fraud may use school registration, summer programs, transportation, or emergencies as a pretext.\u003C\u002Fp>\n\u003Cp>DCPS said it was not aware of misuse at the time of reporting. That is a positive finding but does not guarantee the information will not be used later. Because children's identifying information can remain valid for years, this entry is treated as sensitive.\u003C\u002Fp>\n\u003Ch2>What Should Families Do?\u003C\u002Fh2>\n\u003Cp>Verify unexpected calls, emails, and messages claiming to come from a school or DCPS through an independent channel. Do not use links requesting student IDs, dates of birth, addresses, or account passwords; start from the school's known number or the official dcps.dc.gov domain.\u003C\u002Fp>\n\u003Cp>If an unfamiliar account, application, or service notice appears in a child's name, contact the relevant institution directly and document the incident. Use unique passwords and multi-factor authentication on family email accounts, and teach children to show unexpected requests for personal information to a trusted adult.\u003C\u002Fp>","","A DCPS registration-app breach may have exposed student and guardian data across 55 schools; the affected-person count remains undisclosed.","https:\u002F\u002Fdcps.dc.gov\u002Fsites\u002Fall\u002Fthemes\u002Fdc_dcps_agency\u002Fimages\u002FDCPS_Logo.png",false,{"name":36,"sector":37,"country":38,"website":10,"websiteArchiveUrl":31,"websiteStatus":39,"websiteCheckedAt":12},"District of Columbia Public Schools","Government","United States","active"]