Florida DOE Financial-Aid Website Data Breach: What Applicants Should Know

Florida DOE says its financial-aid website breach may have affected approximately 4.9 million people, but the final confirmed count and per-person exposure remain unknown.

Reader ratingRate this article

Loading reader rating…

Privacy-conscious voting uses a signed random browser identifier and a short-lived network hash; the rating tables contain no raw IP-address column.

Reader ratings require JavaScript; the article remains fully readable without it.

Florida cybersecurity

What Florida financial-aid applicants should know[1]

The Florida Department of Education says unauthorized criminal access affected its student financial-aid website and that compromised personally identifiable information included Social Security numbers.[1]

Reporting cutoff: October 29, 2026, 4:17 p.m. EDT (20:17 UTC).

Bottom line

The department says it became aware on October 19 of unauthorized criminal access to FloridaStudentFinancialAidSG.org.[1] It says the incident was limited to that website and may have affected approximately 4.9 million people.[1] That is a department estimate of people potentially affected—not a final confirmed victim count or a statement that every person had the same fields exposed.[1]

What the department reported

  • The compromised information was personally identifiable information, including Social Security numbers, according to the department.[1]
  • The department says it stopped the unauthorized activity, contained the incident and secured its systems.[1]
  • It says it notified the Florida Attorney General and is working with the Florida Digital Service and Florida Department of Law Enforcement.[1]
  • CBS Miami reported that FLDOE staff became aware on October 19 of unauthorized criminal access to the financial-aid website.[2] CBS also reported that compromised details included personally identifiable information such as Social Security numbers.[2]

Financial aid and eligibility

The department says current financial aid is not at risk.[1] It also says the incident will not delay FLDOE financial-aid disbursements or tuition payments and will not affect eligibility for FLDOE scholarships, grants or student loans.[1] Those are the department’s statements about aid operations; they do not erase the separate identity and credit risk created by compromised personal information.[1]

Practical guidance

Practical guidance based on FLDOE’s published precautions:[1]

  1. Monitor your financial and online accounts for suspicious activity.[1]
  2. Review account statements and credit reports regularly.[1]
  3. Consider placing a fraud alert or credit freeze with the major credit bureaus.[1]
  4. FLDOE links to IdentityTheft.gov/databreach as a Federal Trade Commission resource.[1]

FLDOE says people who previously applied for financial aid in Florida may have been affected.[1] “May” matters: the public page does not provide person-by-person confirmation.[1]

What remains unknown

As of the reporting cutoff, the reviewed FLDOE and CBS Miami pages did not provide a final confirmed affected-person count, a complete list of compromised data fields, person-level field mapping, the intrusion method or access interval, or evidence that every potentially affected person experienced identity theft.[1][2]

How to read the 4.9 million estimate

FLDOE uses qualified language: the incident “may have impacted approximately 4.9 million individuals” and “potentially 4.9 million people” may have been affected.[1] The estimate is material, but its qualifiers should be preserved until the department publishes a firmer count or individual notices establish who was involved.[1]

Sources

  1. Florida Department of Education: Data Breach (accessed October 29, 2026).
  2. CBS Miami: Hackers breached Florida’s Department of Education financial aid website, officials confirm (updated October 29, 2026).