Summary
Written by ThreatClusterfrom site fields, file listing, victim profile, leak post, screenshot, ransom noteEverest claims that ETS (ets.org) has exfiltrated 139.85 GB across 93,461 files. The data categories reportedly include student identity and results, registration and demographic data, test administration data, and related operational records. The leak post indicates a countdown publication status, with the note that the post will unlock when the timer ends.
Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.
What was taken
The ELPAC / CAASPP data archive contains operational education data used to register students, administer assessments, capture test activity, produce individual and district results, prepare aggregate reporting, manage users and assignments, maintain school reference data, review assessment materials, and transfer result packages between work areas.
Ransom note
Published by the group on their leak site, reproduced verbatim.
The files will be published after the timer counts down. The company still has time to get in touch with us
Also stated on the leak page
Fields this group publishes that do not map to a standard column. Labels are the site's own.
- post_unlocks_when_timer_ends
- This post unlocks when the timer ends.
Leak-site images (11)
Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.