❌

Normal view

Law Banning Employer Requirements That Employees Listen to Employer's Religious or Political Speech Likely Violates Employer's First Amendment Rights

29 October 2026 at 22:49

From Calif. Chamber of Commerce v. Bonta, decided today by Judge Richard Tallman, joined by Judges Richard Paez and Mark Bennett:

California Senate Bill (SB) 399 prohibits an employer from subjecting, or threatening to subject, an employee to adverse action if the employee chooses not to attend an employer-sponsored meeting or receive communications from the employer, "the purpose of which is to communicate the employer's opinion about religious or political matters."

The court concluded that the law restricts speech and not just employers' disciplining employees:

It is true that SB 399 facially forbids only the act of "subject[ing], or threaten[ing] to subject, an employee" to discipline for declining to attend certain meetings. But the law only applies to employers who engage in expressive activity at those meetings: namely, "communicat[ing their] opinion. It does not, for example, prohibit taking adverse action against employees who decline to attend a meeting, the sole purpose of which was for employees to fill out their annual tax paperwork. It prohibits adverse action only when the meeting's purpose was for the employer to engage in expressive activity. Thus, the First Amendment applies.

Our conclusion accords with the Eleventh Circuit's recent decision in Honeyfund.com, Inc. v. Governor (11th Cir. 2024). In Honeyfund.com, employers challenged Florida's Individual Freedom Act [part of the Florida Stop W.O.K.E. Act -EV], which forbade subjecting "any individual, as a condition of employment," to "training, instruction, or any other required activity" endorsing certain ideas [related to race, sex, or national origin -EV]. As California does here, Florida defended the law as "a ban on conduct because only the meetings are being restricted," not the underlying speech.

Our sister circuit rejected Florida's conduct-not-speech defense because the only way to know if the law had been violated was to examine the message conveyed at the meeting. Because "the conduct regulated depend[ed] on—and [could not] be separated from—the ideas communicated," Florida's law was "functionally a regulation of speech" implicating the First Amendment.

So too here. If an employer disciplines an employee for failing to attend an employer-sponsored meeting, the only way to know if SB 399 was violated is to "examine the content of the message that is conveyed" at the meeting. We must ask: did the employer express an opinion on political or religious matters?

So "the disfavored 'conduct'"—subjecting absentee employees to disciplinary action—"cannot be identified apart from the disfavored speech"—the employer's opinion on political or religious matters. Further, that California's law (unlike Florida's law) is viewpoint-neutral does not make it content-neutral. Because employers are forbidden from taking adverse action only if they communicate certain messages at the underlying meeting, the law inevitably singles out employers based on their expressive activity….

The court then concluded the law was content-based ("because it applies only when the employer has discussed certain topics: politics and religion") and speaker-based (limited to speech by employers), and was therefore unconstitutional unless it was narrowly to a compelling interest. And it held that the law likely couldn't be justified by an interest in protecting a "captive audience":

In tension here are "the First Amendment rights of speakers" and "the privacy rights of those who may be unwilling … auditors." The State may protect the unwilling auditor's privacy "by enacting reasonable time, place, and manner regulations applicable to all speech irrespective of content." As discussed above, that is not what California did here: SB 399 singles out political and religious speech for regulation. Thus, California, "acting as censor, undert[ook] selectively to shield the public from some kinds of speech on the ground that they are more offensive than others." The Supreme Court has said that "[s]uch selective restrictions have been upheld only when the speaker intrudes on the privacy of the home, or the degree of captivity makes it impractical for the unwilling … auditor to avoid exposure." In such circumstances, California's ability to limit "discourse solely to protect others from hearing it is … dependent upon a showing that substantial privacy interests are being invaded in an essentially intolerable manner."

California fails to identify a single case where a content-based restriction has been upheld because employees were deemed a captive audience or had their substantial privacy interests invaded in an essentially intolerable manner. Instead, the State points to cases upholding speech limitations on public transit, at healthcare facilities, and on school premises, which referred to commuters, patients, and students as captive audiences. California contends that employees are equally captive because they are economically dependent on their employer and risk losing their job, with its pay and benefits, should they refuse to listen to their employer's speech. Thus, California argues that employees need as much protection from unwanted speech at work as commuters on public transit, patients at healthcare facilities, and students at public schools.

California's argument goes too far. Both the Supreme Court and our Court have referred to "captive audiences" only when the government acts as a proprietor or in the context of content-neutral time, place, and manner restrictions. Neither court has relied on a "captive audience" theory to identify a compelling interest sufficient to uphold content-based restrictions on nongovernmental speech in a nongovernmental setting. Nor, as far as we can tell, have any of our sister circuits, with the Eleventh Circuit directly rejecting such a theory. Honeyfund.com. A brief review of the key cases on which California relies demonstrates the point.

The first is Lehman v. City of Shaker Heights (1974), in which the City of Shaker Heights sold advertising space on its public transit vehicles but refused to accept paid political advertising…. A four-Justice plurality … conclud[ed] that the city, operating "in a proprietary capacity," had decided to limit the kinds of advertisements displayed based on several prudential factors. One of those factors was "the risk of imposing upon a captive audience"—commuters. To the plurality, the commuters' "captivity" was merely a prudential consideration in the city's decision to not allow certain advertising on its property.

In his solo concurrence in the judgment, Justice Douglas also described commuters as a "captive audience." That was relevant to his analysis because he believed that the commuters' right "to be free from forced intrusion on their privacy preclude[d] the city from transforming its vehicles of public transportation into forums for the dissemination of ideas upon this captive audience." To Justice Douglas, the commuters' "captivity" limited the city's ability to turn its transit vehicles into a First Amendment forum.

The Supreme Court has since characterized Lehman as recognizing the government's ability to "bar from its facilities certain speech that would disrupt the legitimate governmental purpose for which the property has been dedicated." Our precedents consider an audience's "captivity" in the same manner as Lehman: as a prudential factor for a government, acting as proprietor, to consider when deciding what speech to allow in a nonpublic forum.

The Supreme Court has also considered an audience's degree of captivity when deciding if content-neutral time, place, and manner restrictions on speech in traditionally public forums are reasonable. The two examples California cites involved such restrictions imposed on public ways near healthcare facilities, in which patients are "held 'captive' by medical circumstance."

In short, these cases reveal that an audience's degree of "captivity" is relevant when the government, acting as a proprietor, excludes certain kinds of speech from nonpublic forums or when evaluating the reasonableness of content-neutral time, place, and manner restrictions imposed by the government acting as a regulator. No federal appellate court, including the Supreme Court, has relied on a "captive audience" theory to identify a compelling interest sufficient to support a content-based restriction on nongovernmental speech in a nongovernmental forum.

Considering the dearth of support for California's position and that the "captive audience" theory has been applied to support content-based speech restrictions only in nonpublic government forums, we conclude that the industry groups are likely to succeed on the merits of their First Amendment claim.

The plain, if at times disquieting, truth is that in our pluralistic society, … we are inescapably captive audiences for many purposes. Much that we encounter offends our esthetic, if not our political and moral, sensibilities. Nevertheless, the Constitution does not permit government to decide which types of otherwise protected speech are sufficiently offensive to require protection for the unwilling listener or viewer.

The logic of the decision would also apply to similar laws in Connecticut, Delaware, Illinois, Maine, Maryland, Minnesota, New Jersey, New York, Oregon, Rhode Island, Vermont, Washington, Wisconsin, and the Virgin Islands, many of which were enacted within the last several years. (Of course, the Ninth Circuit decision binding precedent is only binding in, of these states, Oregon and Washington; in others it is only potentially persuasive precedent.)

I expect the decision to be quite controversial, and there will probably be an en banc rehearing petition. Note, though, that the panel consisted of two Clinton-appointed Senior Judges and a Trump-appointed judge; this makes it hard to predict how the en banc court (currently split 16-13 between Democrat and Republican appointees) would vote.

Lonnie D. Giamela (Fisher & Phillips LLP) and Todd A. Lyon (Fisher & Phillips LLP) represent plaintiffs.

The post Law Banning Employer Requirements That Employees Listen to Employer's Religious or Political Speech Likely Violates Employer's First Amendment Rights appeared first on Reason Magazine.

DoorDash offers $17 billion for Instacart in what would be big grocery delivery consolidation

The companies say the tie-up would combine DoorDash's global reach and expertise in logistics with Instacart's purpose-built technology and long relationships with grocers.

Hegseth Fires Top Army General He Accused of Leaking Information to Media

29 October 2026 at 22:30
Lt. Gen. Brett Sylvia was fired as part of a broad and highly unusual campaign to find and punish senior military officers who speak to reporters.

© Marcin Bielecki/EPA-EFE, via Shutterstock

Lt. Gen. Brett Sylvia, a highly regarded officer and combat veteran, was serving on the Joint Staff as the director of strategy when he was removed this week.

Amazon CEO sees AI spending 'meaningfully' higher in 2027

29 October 2026 at 22:28
Amazon CEO Andy Jassy
Amazon CEO Andy Jassy

Michael Nagle/Bloomberg via Getty Images

  • Amazon reported third-quarter earnings on Thursday.
  • Amazon stuck with its $220 billion capex forecast for 2026.
  • CEO Andy Jassy expects the company to spend "meaningfully more" next year.

Amazon is already spending a record amount on AI data centers. Next year will be even bigger.

The world's biggest cloud-computing company reported third-quarter results on Thursday and reiterated its plan for $220 billion in capital expenditure for 2026.

Then, CEO Andy Jassy shared his outlook for next year, saying Amazon expects "to spend meaningfully more in 2027."

Amazon’s spending has become the central question hanging over the company. It's building massive data centers and buying expensive chips and other gear to meet surging demand for AI.

That's pushed its free cash flow into negative territory, with third-quarter results showing a hole of $42.4 billion for the trailing twelve months.

Amazon spent $75.9 billion in cash capital expenditures during the third quarter alone, CFO Brian Olsavsky said, primarily on AWS and AI infrastructure.

The results did little to ease investors' concern about the spending. Amazon's third-quarter revenue and earnings came in below Wall Street expectations, and its shares fell roughly 6% in after-hours trading.

"The cloud unit's improving operating margin was one welcome signal, but it may not be sufficient to alleviate concerns about the sharp spike in capex spending and corresponding freefall of its free cash flow," Sky Canaves, a principal analyst at eMarketer, said in a statement.

Amazon has argued that AI infrastructure takes years to build before it can begin generating revenue, and that AI chip servers typically break even in less than three years once deployed. But the scale of the outlay has raised the stakes for Amazon's cloud business to sustain rapid growth as competitors make similarly enormous bets.

On Thursday, Jassy reiterated his confidence in the company's AI business model and outlook, saying there's a "clear line of sight to attractive financial returns."

The time it takes Amazon to turn newly delivered servers into revenue-generating capacity has also come under scrutiny.

Last week, Business Insider exclusively reported that Amazon has begun receiving billions of dollars in Nvidia server racks before all of the gear can be deployed at their final data-center sites, as power shortages and construction delays hold back new capacity.

"We can fund this plan"

Jassy argued Thursday that Amazon has visibility into the demand supporting its huge AI investments. Customers that need the largest AI deployments reserve capacity well ahead of time, he said, in blocks ranging from hundreds of megawatts to, in some cases, as much as a gigawatt.

"We have very good visibility into 2027 and 2028 and some of '29 too with respect to what customers want in those really big chunks of capacity," Jassy said.

AWS revenue rose 39.3% year over year to $46 billion in the third quarter, its fastest growth in nearly five years. Jassy said he expects AWS revenue to grow more than 40% in both 2027 and 2028, a projection that requires the company to keep rapidly adding capacity.

Jassy described the spending as a once-in-a-lifetime opportunity rather than an optional expansion. It would be more convenient, he said, if Amazon could spread the investment over 25 years. But the speed of the AI market does not allow that.

"We can fund this plan," he said. "It will forever change our revenue. It will forever change our free cash flow."

Have a tip? Contact this reporter via email at ekim@businessinsider.com or Signal, Telegram, or WhatsApp at 650-942-3061. Use a personal email address, a nonwork WiFi network, and a nonwork device; here's our guide to sharing information securely.

Read the original article on Business Insider

Take-Two CEO Strauss Zelnick's management style: No chief of staff, no 'toxic' discretionary pay programs

29 October 2026 at 22:08
Take-Two Interactive CEO and chairman Strauss Zelnick speaking at Business Insider's The Long Play.
Take-Two Interactive CEO and chairman Strauss Zelnick speaking at Business Insider's The Long Play in New York on October 29, 2026.

Carl Timpone/BFA

  • Take-Two's CEO says his 13,000 employees share a collective goal: make the world's best entertainment.
  • His philosophy to get there? A formulaic pay program aligned with that mission, empathetic listening, and direct CEO access.
  • Take-Two Interactive is getting set to launch its hotly-anticipated GTA 6 in November.

Strauss Zelnick is relentlessly focused on making "the best entertainment on earth." There's no confusion about that mission among his employees, he said.

"I have 13,000 colleagues," the Take-Two Interactive CEO said at Business Insider's The Long Play event in New York City on Thursday. "100% of them can and will tell you exactly what I just said."

His management philosophy — "establish a mission, establish a strategy, and promulgate collective culture" — is about to get its biggest test in years.

Take-Two is the publisher behind popular games like "Red Dead Redemption" and "NBA 2K," and, on November 19, they'll launch a new "Grand Theft Auto." The wildly popular series hasn't had a new mainline installment since 2013 and has delayed its launch twice in an effort to meet the studio's exacting standards. GTA 6 is central to Take-Two's forecast for at least $8 billion in net bookings for fiscal 2027.

Zelnick has run the company since 2007. To align employee incentives with Take-Two's big expectations, he believes compensation should be based on a formula aligned with the company's mission — not left to manager discretion.

"I personally believe that discretionary compensation programs are toxic," he said, adding that they create "politics and get you the wrong results, especially over time."

"So, we're all formulaic," he said. "You perform, the company performs — you get paid. You perform, the company doesn't perform — you don't get paid. Company performs, you don't perform — if you still have your job, you get paid."

Zelnick also said he has no chief of staff, is available on Slack 24/7, and shares his cellphone number with employees.

"If you're not president of the United States, you have no reason to have a chief of staff," he said.

That doesn't mean he will swoop in and override an employee's manager, said Zelnick, who considers himself an empathetic listener. He said workers should feel heard — and that he will try to help them solve a problem.

Still, he doesn't believe his formula at Take-Two is necessarily the right approach for every leader.

"Leadership comes in all flavors," he said. "You have to be your own kind of leader, and I don't think anyone should adopt my skills, because you're not me."

Read the original article on Business Insider

Hegseth reportedly fires high-ranking army strategist over alleged leaks

29 October 2026 at 22:01

Pentagon says it has referred leak case to justice department for criminal investigation

The US defense secretary, Pete Hegseth, has reportedly dismissed Lt Gen Brett Sylvia, a high-ranking army strategist serving on the Pentagon’s joint staff, following allegations that he disclosed classified information to the public.

The Pentagon announced on Thursday that it had referred an alleged information leak case for criminal investigation, maintaining that the removal of the senior general was essential “to protect sensitive information”, the Washington Post reported.

Continue reading...

© Photograph: Spc. Javan Johnson/Training Support Activity Europe

© Photograph: Spc. Javan Johnson/Training Support Activity Europe

© Photograph: Spc. Javan Johnson/Training Support Activity Europe

The CEO behind Grand Theft Auto has an 8-part longevity routine for shredded abs and sharp decision-making. Here's why peptides aren't part of it.

29 October 2026 at 21:42
Take-Two Interactive CEO and chairman Strauss Zelnick speaking at Business Insider's The Long Play.
Take-Two Interactive CEO and chairman Strauss Zelnick, 69, loves a hard workout.

Carl Timpone/BFA

  • Strauss Zelnick, the CEO of Take-Two Interactive, said he prefers working out to playing video games.
  • He is a longevity buff, deep into fitness and anti-aging habits.
  • In a candid conversation with Business Insider, he said skip the peptides, and try these 7 things instead.

Media mogul Strauss Zelnick spends his days hyper-focused on making the most creative, innovative, best video games in the world.

As the CEO and Chairman of video game-maker Take-Two Interactive, he's readying to release Grand Theft Auto 6 next month.

At home though, he doesn't play games. He prefers to spend his time working out and staying healthy for a long time.

At Business Insider's "The Long Play" event on Thursday, Zelnick said his formula for healthy aging is both simple and effective.

While he calls biohacker Bryan Johnson, the man behind the "Don't Die" movement, a friend, he said trying to live forever is a pretty silly strategy.

"There's almost no evidence that anything anyone is doing will increase your lifespan," he told Business Insider's Senior Leadership & Workplace Correspondent, Sarah Needleman. "How many of us really want to increase our lifespan from like 96 to 101? Look, that is not on my bucket list, thank you very much."

Instead, Zelnick, who wrote a book on "Becoming Ageless" in 2018, focuses on the same core behaviors for "taking care of yourself" that longevity experts around the world swear by for maintaining health and happiness for the long haul.

1: Do not smoke

"Smoking is the factor most highly correlated with a short, unhealthy, and frankly, unhappy life," Zelnick said. "Don't smoke."

2: Don't abuse alcohol and drugs

These lead to "a bad old age, or no old age," he said.

3: Get some exercise

Zelnick said: "You don't have to do what I do," with 6 a.m. wakeup calls for group training sessions, or twice-a-day workouts.

"I do what I do because I love it, it's my passion," he said. "If you walk 30 minutes a day, four or five days a week — just walk — you're like 80% of the way there."

4: Eat a "responsible" diet

Zelnick says he doesn't have an "insanely healthy diet," but he tries to maintain some balance. "I eat a lot of vegetables and salads and protein — I also like sweets, and I do eat carbs."

5: Sleep at least 7 hours a day

Zelnick says he treats this as a non-negotiable for his business.

"If you're getting less than six hours, you're making bad decisions," he said.

6: Have "some kind of emotional or spiritual life"

Longevity experts stress this is key for mental health, and establishing a sense of purpose in the world.

7: Find community

Zelnick said it's critical to get support from "people who love you."

8: Skip overhyped health hacks

strauss
Strauss Zelnick, 69, is the CEO of Take Two Interactive.

Carl Timpone / BFA

Zelnick says don't waste your time with all the overhyped, unproven health hacks.

"All the other stuff, like, peptides? A: No," he said. "We have an FDA for a reason. Don't take something that is not double-blind tested."

And, he said, be careful with some of the internet's most famous longevity gurus. He name-checked controversial Harvard professor David Sinclair, who has made bold promises about the anti-aging effects of unproven supplements, including resveratrol, a plant polyphenol found in grapes and red wine, and NMN, which is a precursor to NAD, the vital coenzyme that's in every cell of our body.

"A medical doctor actually is a degree: M-D, an MD degree," Zelnick said. "Not a David Sinclair degree, he is not actually a doctor."

Read the original article on Business Insider

Bostonians Compete to Be Their Airport’s New Voice

29 October 2026 at 21:06
By Christmas, the winning voice will echo through Boston Logan International in recorded greetings and announcements that millions of travelers will hear.

© Brian Snyder/Reuters

The competition to be the voice of the Boston Logan International Airport drew more than 5,000 auditions from Massachusetts residents.

The New DNA Technology That Linked Ted Bundy to a 52-Year-Old Cold Case

29 October 2026 at 20:55
Software known as STRmix was instrumental in identifying Mr. Bundy’s DNA in a decades-old sample.

© Associated Press

Ted Bundy, one of the nation’s most prolific and notorious spree killers, on trial for murder in a Miami courtroom in 1979.

La reina Sonia de Noruega elige Málaga y el Museo Picasso para su primer viaje oficial al extranjero tras la muerte de Harald V

By: EL PAÍS · EFE
29 October 2026 at 20:54

Dos meses después de la muerte del rey Harald V de Noruega, su esposa, la reina Sonia, protagoniza su primer viaje oficial al extranjero. El lugar elegido es Málaga, donde ha viajado este jueves, 29 de octubre, para inaugurar en el Museo Picasso una exposición dedicada a Edvard Munch y Pablo Picasso. El viaje se ha producido en un momento de cambios para ella: además de tener que hacer frente a la pérdida de quien feura su mano derecha durante 58 años, su hijo, el rey Haakon VIII, le quitó hace un par de semanas el tratamiento de majestad, aunque todavía conserva el título de reina que le ha acompañado durante casi cuatro décadas.

Seguir leyendo

© Jorge Zapata (EFE)

La reina de Sonia de Noruega pronuncia unas palabras durante la inauguración de la exposición 'Munch-Picasso' celebrada este jueves en el Museo Picasso, en Málaga.

Millions of students caught in California data breach

29 October 2026 at 20:30

You send your child to school expecting teachers to protect their education. You probably don't think much about what happens to their personal information after they take a standardized test. But a massive data breach in California is raising some uncomfortable questions about who has access to student records and how safely that information is stored.

Hackers accessed and copied sensitive records belonging to millions of current and former California public school students. The stolen information includes home addresses, birth dates and even details about disabilities. And here's something families need to know. You could live thousands of miles from California today and still be caught up in this breach if you or your child previously attended a public school there.

Join our upcoming CyberGuy LIVE class: 5 Ways to Travel Smarter and Save Money

In this free live online class, Kurt "CyberGuy" Knutsson will share five practical ways to protect your trip and your wallet this holiday travel season. You’ll learn how to secure your phone and personal information, find better travel deals, avoid common scams, save money on bookings and use technology to make your travels easier and less stressful. No technical experience is needed.

Join us Saturday, October 31, at 11 AM ET / 8 AM PT. Register for free now at CyberGuyLive.com.

ORACLE HEALTH DATA BREACH EXPOSES NEARLY 20 MILLION PATIENTS

How millions of California student records were stolen

The breach involves Educational Testing Service (ETS), a nonprofit organization that works with the California Department of Education. ETS helps administer statewide student assessments and maintains information connected to those tests. According to state officials, someone gained unauthorized access to an ETS-operated secure file transfer site. Investigators determined that the attacker used a compromised login credential to enter the system. The intruder then copied files containing student information at various times between May 22 and Sept. 18, 2026.

ETS discovered the suspicious activity on Sept. 25. The company disabled the affected account and took the file transfer site offline. It also brought in outside cybersecurity specialists to investigate. The company says it has since built a replacement system with stronger security controls. So far, ETS reports finding no evidence that the stolen information has been made publicly available. However, investigators have confirmed that someone accessed and copied the records.

What personal information was stolen in the student data breach?

The California student data breach involved far more than test scores. Depending on the student, the compromised files may contain information that could help someone identify a child or learn personal details about their family circumstances.

The exposed records may include:

  • Student names and dates of birth
  • Home addresses, school names and grade levels
  • Statewide and local student identification numbers
  • Race, ethnicity and primary language
  • Country of origin and English learner status
  • Disability information and testing accommodations
  • Participation in certain educational assistance programs
  • Statewide assessment participation and test results

Some records also identified whether a student qualified for programs serving children experiencing homelessness or other educational needs. Fortunately, officials say the stolen files did not contain Social Security numbers, financial account details, driver's license numbers, passwords or parent and guardian personal information.

However, there is still plenty to be concerned about. Someone who knows a child's name, school and address could potentially use that information to create a convincing message that appears to come from a teacher or school administrator. Disability information also raises additional privacy concerns because those details are particularly personal.

Why this California breach could affect families nationwide

This is where the story gets especially troubling. Although the breach involves California's public school system, the people whose records were stolen may now live anywhere in the United States. According to the California Department of Education, the compromised information includes records covering all students enrolled during the previous three school years. However, the affected population extends beyond those students.

The state also identifies a group of former students who left California public schools as far back as 2006 and whose transfers to another school were never confirmed with the department. That creates a situation many families may never have considered. Say your child attended elementary school in Los Angeles before your family relocated to Texas. Perhaps you graduated from a California public school years ago and now live in Florida. Your old student information could still be among the compromised records if it falls within the affected groups.

Former students who are now adults may also be eligible for the free identity-protection services being offered. Importantly, this does not mean every student attending school outside California has been affected. In a statement to CyberGuy, ETS confirmed that no other ETS customers were affected by the incident. The concern for families elsewhere comes from their past connection to California's public schools. California has roughly 5.7 million public school students, according to reporting on the breach. Since the compromised files span multiple school years, millions of people are potentially involved. Officials have not yet released a final count of unique affected individuals.

Where the student data breach investigation stands

The California Department of Education and the State Board of Education are coordinating with cybersecurity specialists and other state agencies. The California Cybersecurity Integration Center is assisting with the technical investigation. Meanwhile, state officials are reviewing ETS's compliance with applicable data security requirements and its contractual obligations.

In its statement to CyberGuy, ETS said, "We have implemented additional safeguards, including enhanced monitoring, strengthened access controls, and further third-party review of our security practices." ETS says it continues monitoring for signs that the stolen information has surfaced publicly. For families, the unresolved question is what happens to the copied information next. Even without evidence of a public leak, sensitive student records in unauthorized hands create a privacy risk that deserves continued attention.

A SCAMMER HAS YOUR NAME, PHONE NUMBER AND ADDRESS. WHAT CAN THEY ACTUALLY DO?

How to find out if your information was exposed

ETS began notifying affected students and families on October 16, 2026. The state expects notifications to continue through early November. Letters and emails will explain the incident and identify the types of information involved. They will also include instructions for accessing complimentary identity-protection services. However, here's an important warning. Not receiving a notification does not necessarily mean your information is safe. Some former students may have outdated contact information on file.

Families who are concerned should visit the official California ETS incident webpage. It contains frequently asked questions and links to breach notifications available in 27 languages. You can also call the incident assistance line at 833-931-8488, Monday through Friday, from 6 a.m. to 6 p.m. Pacific Time.

Affected students can get two years of free identity protection

ETS is offering affected current and former students 24 months of free identity theft protection. Parents or legal guardians can enroll eligible children under 18, while adults, including former students, can enroll themselves. The services are designed to help monitor for potential identity theft and provide assistance if someone misuses their personal information.

The enrollment deadline is March 19, 2027. Eligible minors who turn 18 before March 19, 2029 may also qualify for adult coverage using the activation code provided in their notification. Enrollment is free, and no credit card is required. Identity restoration assistance is also available to eligible individuals for 24 months from their notification date, even without enrolling in monitoring services. For complete eligibility details and enrollment instructions, visit the California Department of Education's official incident webpage at at cde.ca.gov/nr/in/ets-incident.asp.

How to protect your child after the California student data breach

Even without stolen passwords or financial account numbers, student records deserve serious attention. Here are practical steps I recommend taking if your family may be affected.

1. Verify the breach notification before responding

Scammers frequently use real data breaches as an excuse to send fraudulent emails. A message claiming to come from ETS or Experian could direct you to a fake enrollment website. Instead of clicking an unexpected link, open your browser and visit the official California Department of Education incident page. Follow the verified instructions from there.

2. Consider identity theft protection

Eligible families should take advantage of the 24 months of free identity-protection services being offered following this breach. Follow the enrollment instructions in your official notification and keep a copy for your records. No credit card is required.

For additional protection, consider an identity theft protection service which offers identity monitoring, alerts about suspicious activity and access to restoration specialists if identity theft occurs. Some services also offer paid family plans that can cover children, making it an option for parents concerned about protecting their family's personal information over the long term. Coverage and benefits vary by plan. See my tips and best picks on Best Identity Theft Protection at CyberGuy.com.

3. Consider freezing your child's credit

One of the strongest steps you can take against certain forms of identity theft is placing a security freeze on a child's credit file. The Federal Trade Commission says parents and legal guardians can request a free credit freeze for children under 16. Teenagers ages 16 and 17 can request their own freezes. Contact Equifax, Experian and TransUnion separately. Each bureau has its own process for handling minors. A freeze can make it harder for criminals to open new credit accounts using a child's identity. However, it cannot prevent every form of fraud.

4. Watch for suspicious school-related messages

Pay closer attention to unexpected emails or text messages claiming to involve school records. A scammer with access to personal details could make a fraudulent communication seem unusually credible. For example, someone might claim that your child's testing account requires immediate verification. Before responding, contact the school using a phone number you already trust. Avoid sharing personal information through unexpected links or attachments. Consider using strong antivirus software on your family's devices. It can help detect malicious links, suspicious downloads and malware hidden in fake school notifications. While it cannot recover stolen student information, it adds another layer of protection against scammers who may try to exploit the breach. Get my picks for the best 2026 antivirus protection winners for your Windows, Mac, Android & iOS devices at Cyberguy.com

5. Remove your family's personal information from the internet

Scammers can use information found online to build a more detailed profile of you or your family. That's why I recommend considering a personal data removal service. These services can help remove personal information from data broker websites that collect and sell details such as names, addresses and phone numbers. While these services cannot retrieve information stolen in this breach, they can help reduce how much additional information is publicly available. If you're concerned about your child's information, check whether the service offers protection for minors before signing up. Check out my top picks for data removal services and get a free scan to find out if your personal information is already out on the web by visiting CyberGuy.com.

6. Check for signs of identity theft

Adults who may have been affected can review their credit reports for unfamiliar accounts or suspicious activity. Visit AnnualCreditReport.com to obtain free reports from the three major credit bureaus. Parents should also watch for unexpected bills or collection notices addressed to their children. Those can be warning signs that someone has misused a minor's identity. If you discover evidence of identity theft, report it through IdentityTheft.gov . The FTC provides a recovery plan to help you address fraudulent accounts and document the problem.

7. Ask what information your child's school retains

You can also contact your child's school district to better understand how it handles student records. Ask what information outside contractors receive and how long they retain it. Schools may have legal obligations to maintain certain records. Still, parents can ask about retention policies and security safeguards. This conversation is worthwhile regardless of where your family lives.

Kurt's key takeaways

I've covered plenty of data breaches over the years, but this one bothers me because we're talking about children who had no choice about handing over their information. They went to school, took required tests and trusted the adults and organizations handling their records. Now, some of those details have ended up in the wrong hands. What I find especially troubling is how far back some of these records could go. Think about someone who left California years ago and has no reason to believe their old student information is still sitting on a testing company's system. That person could be living on the opposite side of the country and suddenly have to worry about a breach involving records from childhood. I appreciate that ETS is offering free identity protection, but I'd like to see schools and testing companies explain more clearly how long they keep sensitive student information and why. Parents deserve answers before a breach happens.

Should schools and outside testing companies be allowed to keep sensitive student records for years after a child leaves, or should families have more control over when that information gets deleted? Let us know by writing to us at CyberGuy.com.

Sign up for my FREE CyberGuy Newsletter

  • Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox.
  • For simple, real-world ways to spot scams early and stay protected, visit CyberGuy.com – trusted by millions who watch CyberGuy on TV daily.
  • Plus, you'll get instant access to my Ultimate Scam Survival Guide free when you join.

CLICK HERE TO DOWNLOAD THE FOX NEWS APP

Copyright 2026 CyberGuy.com. All rights reserved.

Vance makes fiery closing pitch for Paxton: ‘Texas is not surrendering a damn thing’

29 October 2026 at 20:28
WEATHERFORD, Texas — Vice President delivered a fiery closing pitch for Republican Senate candidate and Texas Attorney General Ken Paxton on Thursday, telling supporters the Lone Star State would not surrender “a damn thing” on Election Day.  “I need you to send a message on November the 3rd that America belongs to those who love…

❌