Skip to content
Phishing Scam Targets South Carolina K-12 Voucher Program Vendors

Phishing Scam Targets South Carolina K-12 Voucher Program Vendors

First seen 12 Oct 2026, 13:32 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 12, 2026 at 15:35 UTC

A phishing scam targeting vendors of South Carolina's K-12 voucher program led to the fraudulent redirection of approximately $100,000. The South Carolina Department of Education alerted vendors on September 25, 2026, about the scam, which involved spoof emails requesting banking information. The attack affected service providers like private schools and tutoring centers, causing a temporary lockdown on disbursements for about a week. While the Department of Education is working with ClassWallet to recover the funds, the final impact remains undetermined. The incident has raised concerns regarding the security of the $83 million Education Scholarship Trust Fund, which serves 15,000 students. Some vendors reported their accounts were restored by October 5, but the extent of the impact on the 959 listed providers is still unclear.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-09-25
Vendors notified of phishing scam
The South Carolina Department of Education alerted vendors about a phishing scam targeting their banking information.
The 74 Million
2026-10-05
Vendor accounts restored
Several vendors reported that their accounts were fully functional again after being placed in 'archive' mode due to the phishing scam.
Post and Courier

More articles in this cluster (2)

Following this threat?

Track Addlestone Hebrew Academy in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (8)

1 / 3

Common questions

What should affected vendors do?
Affected vendors should verify their banking information and monitor their accounts for unauthorized transactions.
How long did the lockdown last?
The lockdown on disbursements lasted for roughly a week following the phishing incident.
Is there a risk of further attacks?
Yes, the incident highlights the need for improved security measures to protect against similar phishing attacks in the future.