Glendale Community College Breach Exposes 793,925 Student Records in Pay‑or‑Leak Extortion Campaign
What Happened — In June 2026, the threat group ShinyHunters announced a “pay‑or‑leak” extortion demand against Glendale Community College. The attackers subsequently published a dump containing nearly 800 k unique email addresses plus names, dates of birth, Social Security numbers, phone numbers, physical addresses and other enrollment‑related data.
Why It Matters for Trust & Control Assurance
- Demonstrates the need for continuous monitoring of data‑handling controls and evidence that access to student records is limited to authorized personnel.
- Highlights the importance of a documented incident‑response program that can produce a defensible audit trail when a breach is discovered.
- Shows how a control‑mapping framework can translate a single data‑protection control into compliance evidence across multiple standards (e.g., NIST CSF, ISO 27001, GDPR).
Who Is Affected – Higher‑education institutions and any service providers that store or process student enrollment data.
Recommended Actions
- Map your data‑protection controls to the Verisq Common Framework (VCF) to identify gaps across all relevant regulations.
- Collect and retain evidence of encryption, access‑logging, and privileged‑account reviews to support audit readiness.
- Review and test your incident‑response playbook, ensuring it includes steps for rapid notification, forensic evidence preservation, and coordination with regulators.
Source: Have I Been Pwned – Glendale Community College breach
Technical Notes – The breach was disclosed as part of a “pay‑or‑leak” extortion campaign; the exact initial intrusion vector was not publicly identified. Exfiltrated data includes academic records, dates of birth, email addresses, genders, government‑issued IDs (including SSNs), names, phone numbers and physical addresses.