Hackers stole personal information belonging to millions of current and former California public school students who took state-mandated tests, education officials announced Friday.

The breach involved Educational Testing Service, which provides testing services to California schools. The stolen records include names, addresses, dates of birth, student identification numbers and information about disabilities and eligibility for federal programs. School and district names and demographic details were also exposed.

The breach affects students enrolled since 2023, reaching beyond the state’s current 5.7 million public school students. It also affects some who left California without confirming a transfer to another school, with records dating back to 2006. District leaders were notified on Oct. 2, before the public announcement.

State education officials are working with other state agencies to determine the incident’s scope and which information may have been affected, Deputy Superintendent Mary Nicely said in a letter.