One credential, four months of undetected access, 5.7 million students. ETS didn't notice until September. The file transfer site is now offline. Two years of free credit monitoring awaits.

https://www.securityweek.com/one-compromised-login-exposed-millions-of-california-students-records/