Cybersecurity Experts Confirm Hackers Who Stole Millions Of Students' Home Addresses Now Know Where Millions Of Students Live, Residential Continuity Analysts Describe Data As 'Accurate, Extractable, And Extremely Useful For Knowing Where The Children Are'

SACRAMENTO, CA — In what cybersecurity analysts are calling a 'significant, addressable, and almost certainly preventable transfer of data to people with bad intentions,' hackers have successfully extracted the names and home addresses of millions of California public school students from standardized testing infrastructure, leaving officials to grapple with the difficult question of what it means when information goes somewhere it was not supposed to go.

The breach, which affected current and former students who attended California public schools over the last three years, has prompted the immediate formation of the Statewide Student Data Displacement and Residential Information Continuity Task Force, a seventeen-member panel assembled specifically to explain, using charts, why hackers having children's addresses is suboptimal.

'What we can confirm at this time,' said Task Force Chair Dr. Elaine Morrow, standing before a PowerPoint slide reading 'NAMES: GONE,' 'is that the names and addresses of millions of students were stored in a database, and that database was accessed by individuals whose access to that database was not authorized, resulting in a situation where those individuals now have the names and addresses that were in the database.'

Dr. Morrow paused to let the room absorb this. The room absorbed it slowly.

Experts from the California Institute for Digital Infrastructure Grief convened a separate press conference Wednesday to address public confusion about what, precisely, had occurred. Lead analyst Dr. Trevor Holt presented a forty-slide deck establishing that data which is stolen is subsequently no longer exclusively held by the party from whom it was stolen, and that hackers, by definition, are people who have hacked things.

'We want to be very clear,' said Dr. Holt, clicking to a slide depicting an arrow moving from a locked safe to a figure wearing a hoodie. 'The information has moved. It moved from here'—he pointed to the safe—'to here.' He pointed to the hoodie figure. 'This represents a directional change in the information's location that was not sanctioned by the California Department of Education, and which we are describing internally as a problem.'

When asked what type of problem, Dr. Holt referred reporters to a supplemental document titled 'Problem Typology: An Overview of the Problem,' which characterized the breach as 'bad, ongoing in its consequences, and involving children.'

The testing vendor at the center of the breach, EdTechServe Solutions LLC, released a statement expressing that it 'takes the security of student data extremely seriously,' which cybersecurity historians note is a phrase that appears, on average, 4.7 hours after a company's data is stolen. The statement did not address why student records were stored using what one unnamed federal investigator described as 'a password that appeared to contain the word password.'

State Superintendent of Public Instruction Delores Vance held a press conference Thursday at which she assured parents that the state was 'doing everything in its power' to address a situation that had already fully concluded.

'The breach has happened,' she acknowledged, nodding gravely. 'We cannot un-breach it. What we can do, going forward, is be very serious about this and form additional task forces, some of which may meet quarterly.'

A parent in attendance asked whether students' data was now safe. Superintendent Vance consulted briefly with an aide before confirming that the data that had been stolen was 'still stolen, as of this morning.'

Meanwhile, the affected students — millions of them, spanning three academic years of California public school enrollment — were individually notified via a letter mailed to the home addresses that had just been compromised, a delivery mechanism that cybersecurity ethicists described as 'technically functional, spatially ironic, and addressed correctly because the hackers, too, now have that information.'

The FBI's Cyber Division confirmed it has opened an investigation and is 'pursuing all available leads,' which investigators clarified means they are looking for the hackers, who are the people who did the hacking, and finding them would constitute a resolution to the ongoing situation of not having found them yet.

At press time, the Task Force had released an interim report running to 214 pages, the executive summary of which concluded that student data 'should, going forward, be kept somewhere hackers cannot get it,' a recommendation officials described as 'actionable, directional, and worth every hour of the $340,000 consulting contract.'