A Colorado mother of three says her family was denied $12,000 in taxpayer-funded preschool benefits because she chose a Catholic education for her children, accusing the state of discriminating against religious families through a program promoted as universal.
Erika Nagle, whose children attend St. Mary Catholic School in Littleton, Colorado, told Fox News Digital that two of her children were denied access to the state's preschool funding program, leaving her family to cover additional education expenses.
"We are being excluded from this benefit because we are Catholic," Nagle said in an interview with Fox News Digital. "And so in a state that preaches inclusion, they are actively going out of their way to exclude a huge chunk of people because of our religious beliefs."
At the center of the dispute is Colorado's universal preschool program, which Nagle says provides more than $6,000 per eligible child for preschool education. Catholic schools challenging the program argue that the state's participation requirements unfairly burden their religious beliefs and admissions practices.
According to Becket, Colorado launched its preschool funding program in 2023, offering eligible families approximately $6,300 to cover 15 hours of preschool per week. The organization said the program was promoted as a universal benefit that would allow parents to choose among public, private and religious preschools, prompting Catholic families across the state to seek participation.
Nagle says the consequences go beyond her family's finances.
"We have had two preschools in the archdiocese that have been closed down," she said, arguing that the program is affecting Catholic school enrollment and pressuring families to abandon the religious education they want for their children.
"The state is dangling a carrot over here, incentivizing people to leave their faith, to abandon the Catholic education that they want," she said.
Nagle argued that nearly every school has admissions criteria tailored to the community it serves, whether that means prioritizing neighborhood children, people who identify as LGBTQ, children with special needs or low-income families. She said St. Mary similarly prioritizes Catholic families while welcoming students whose families are willing to respect the school's religious teachings. Nagle questioned why the Catholic school's admissions practices should be treated differently.
"The state grants $6000 per family to be used during the year before kindergarten, so the year when they're in pre-K, which is technically the year before kindergarten, and you can use it at the school of your choice," Nagle said. "And so Catholics are forced to pay the price for the school of our choice, which is Catholic school. And so you have thousands of Coloradans that are being forced to pay more than anyone else."
The legal battle raises questions about the extent to which religious schools can participate in publicly funded education programs while maintaining faith-based admissions policies.
"Colorado shouldn't force Catholic families to give up their choice, which is a faith-based school, and, you know, the state is letting other schools serve their communities, but they're not letting Catholic families serve their communities," Nagle said. "And to me, it also makes me wonder, is this by design, is this paving the way for godlessness or for what? Why can't Catholic families receive this benefit when there are other schools that were granted their exemption for other admissions requirements?"
The Supreme Court is hearing the case on Tuesday.
A spokesperson for the Colorado Department of Early Childhood (CDEC) said the department could not comment on pending litigation.
You send your child to school expecting teachers to protect their education. You probably don't think much about what happens to their personal information after they take a standardized test. But a massive data breach in California is raising some uncomfortable questions about who has access to student records and how safely that information is stored.
Hackers accessed and copied sensitive records belonging to millions of current and former California public school students. The stolen information includes home addresses, birth dates and even details about disabilities. And here's something families need to know. You could live thousands of miles from California today and still be caught up in this breach if you or your child previously attended a public school there.
Join our upcoming CyberGuy LIVE class: 5 Ways to Travel Smarter and Save Money
In this free live online class, Kurt "CyberGuy" Knutsson will share five practical ways to protect your trip and your wallet this holiday travel season. You’ll learn how to secure your phone and personal information, find better travel deals, avoid common scams, save money on bookings and use technology to make your travels easier and less stressful. No technical experience is needed.
Join us Saturday, October 31, at 11 AM ET / 8 AM PT. Register for free now at CyberGuyLive.com.
How millions of California student records were stolen
The breach involves Educational Testing Service (ETS), a nonprofit organization that works with the California Department of Education. ETS helps administer statewide student assessments and maintains information connected to those tests. According to state officials, someone gained unauthorized access to an ETS-operated secure file transfer site. Investigators determined that the attacker used a compromised login credential to enter the system. The intruder then copied files containing student information at various times between May 22 and Sept. 18, 2026.
ETS discovered the suspicious activity on Sept. 25. The company disabled the affected account and took the file transfer site offline. It also brought in outside cybersecurity specialists to investigate. The company says it has since built a replacement system with stronger security controls. So far, ETS reports finding no evidence that the stolen information has been made publicly available. However, investigators have confirmed that someone accessed and copied the records.
What personal information was stolen in the student data breach?
The California student data breach involved far more than test scores. Depending on the student, the compromised files may contain information that could help someone identify a child or learn personal details about their family circumstances.
The exposed records may include:
Student names and dates of birth
Home addresses, school names and grade levels
Statewide and local student identification numbers
Race, ethnicity and primary language
Country of origin and English learner status
Disability information and testing accommodations
Participation in certain educational assistance programs
Statewide assessment participation and test results
Some records also identified whether a student qualified for programs serving children experiencing homelessness or other educational needs. Fortunately, officials say the stolen files did not contain Social Security numbers, financial account details, driver's license numbers, passwords or parent and guardian personal information.
However, there is still plenty to be concerned about. Someone who knows a child's name, school and address could potentially use that information to create a convincing message that appears to come from a teacher or school administrator. Disability information also raises additional privacy concerns because those details are particularly personal.
Why this California breach could affect families nationwide
This is where the story gets especially troubling. Although the breach involves California's public school system, the people whose records were stolen may now live anywhere in the United States. According to the California Department of Education, the compromised information includes records covering all students enrolled during the previous three school years. However, the affected population extends beyond those students.
The state also identifies a group of former students who left California public schools as far back as 2006 and whose transfers to another school were never confirmed with the department. That creates a situation many families may never have considered. Say your child attended elementary school in Los Angeles before your family relocated to Texas. Perhaps you graduated from a California public school years ago and now live in Florida. Your old student information could still be among the compromised records if it falls within the affected groups.
Former students who are now adults may also be eligible for the free identity-protection services being offered. Importantly, this does not mean every student attending school outside California has been affected. In a statement to CyberGuy, ETS confirmed that no other ETS customers were affected by the incident. The concern for families elsewhere comes from their past connection to California's public schools. California has roughly 5.7 million public school students, according to reporting on the breach. Since the compromised files span multiple school years, millions of people are potentially involved. Officials have not yet released a final count of unique affected individuals.
Where the student data breach investigation stands
The California Department of Education and the State Board of Education are coordinating with cybersecurity specialists and other state agencies. The California Cybersecurity Integration Center is assisting with the technical investigation. Meanwhile, state officials are reviewing ETS's compliance with applicable data security requirements and its contractual obligations.
In its statement to CyberGuy, ETS said, "We have implemented additional safeguards, including enhanced monitoring, strengthened access controls, and further third-party review of our security practices." ETS says it continues monitoring for signs that the stolen information has surfaced publicly. For families, the unresolved question is what happens to the copied information next. Even without evidence of a public leak, sensitive student records in unauthorized hands create a privacy risk that deserves continued attention.
ETS began notifying affected students and families on October 16, 2026. The state expects notifications to continue through early November. Letters and emails will explain the incident and identify the types of information involved. They will also include instructions for accessing complimentary identity-protection services. However, here's an important warning. Not receiving a notification does not necessarily mean your information is safe. Some former students may have outdated contact information on file.
Families who are concerned should visit the official California ETS incident webpage. It contains frequently asked questions and links to breach notifications available in 27 languages. You can also call the incident assistance line at 833-931-8488, Monday through Friday, from 6 a.m. to 6 p.m. Pacific Time.
Affected students can get two years of free identity protection
ETS is offering affected current and former students 24 months of free identity theft protection. Parents or legal guardians can enroll eligible children under 18, while adults, including former students, can enroll themselves. The services are designed to help monitor for potential identity theft and provide assistance if someone misuses their personal information.
The enrollment deadline is March 19, 2027. Eligible minors who turn 18 before March 19, 2029 may also qualify for adult coverage using the activation code provided in their notification. Enrollment is free, and no credit card is required. Identity restoration assistance is also available to eligible individuals for 24 months from their notification date, even without enrolling in monitoring services. For complete eligibility details and enrollment instructions, visit the California Department of Education's official incident webpage at at cde.ca.gov/nr/in/ets-incident.asp.
How to protect your child after the California student data breach
Even without stolen passwords or financial account numbers, student records deserve serious attention. Here are practical steps I recommend taking if your family may be affected.
1. Verify the breach notification before responding
Scammers frequently use real data breaches as an excuse to send fraudulent emails. A message claiming to come from ETS or Experian could direct you to a fake enrollment website. Instead of clicking an unexpected link, open your browser and visit the official California Department of Education incident page. Follow the verified instructions from there.
2. Consider identity theft protection
Eligible families should take advantage of the 24 months of free identity-protection services being offered following this breach. Follow the enrollment instructions in your official notification and keep a copy for your records. No credit card is required.
For additional protection, consider an identity theft protection service which offers identity monitoring, alerts about suspicious activity and access to restoration specialists if identity theft occurs. Some services also offer paid family plans that can cover children, making it an option for parents concerned about protecting their family's personal information over the long term. Coverage and benefits vary by plan. See my tips and best picks on Best Identity Theft Protection at CyberGuy.com.
3. Consider freezing your child's credit
One of the strongest steps you can take against certain forms of identity theft is placing a security freeze on a child's credit file. The Federal Trade Commission says parents and legal guardians can request a free credit freeze for children under 16. Teenagers ages 16 and 17 can request their own freezes. Contact Equifax, Experian and TransUnion separately. Each bureau has its own process for handling minors. A freeze can make it harder for criminals to open new credit accounts using a child's identity. However, it cannot prevent every form of fraud.
4. Watch for suspicious school-related messages
Pay closer attention to unexpected emails or text messages claiming to involve school records. A scammer with access to personal details could make a fraudulent communication seem unusually credible. For example, someone might claim that your child's testing account requires immediate verification. Before responding, contact the school using a phone number you already trust. Avoid sharing personal information through unexpected links or attachments. Consider using strong antivirus software on your family's devices. It can help detect malicious links, suspicious downloads and malware hidden in fake school notifications. While it cannot recover stolen student information, it adds another layer of protection against scammers who may try to exploit the breach. Get my picks for the best 2026 antivirus protection winners for your Windows, Mac, Android & iOS devices at Cyberguy.com
5. Remove your family's personal information from the internet
Scammers can use information found online to build a more detailed profile of you or your family. That's why I recommend considering a personal data removal service. These services can help remove personal information from data broker websites that collect and sell details such as names, addresses and phone numbers. While these services cannot retrieve information stolen in this breach, they can help reduce how much additional information is publicly available. If you're concerned about your child's information, check whether the service offers protection for minors before signing up. Check out my top picks for data removal services and get a free scan to find out if your personal information is already out on the web by visiting CyberGuy.com.
6. Check for signs of identity theft
Adults who may have been affected can review their credit reports for unfamiliar accounts or suspicious activity. Visit AnnualCreditReport.com to obtain free reports from the three major credit bureaus. Parents should also watch for unexpected bills or collection notices addressed to their children. Those can be warning signs that someone has misused a minor's identity. If you discover evidence of identity theft, report it through IdentityTheft.gov . The FTC provides a recovery plan to help you address fraudulent accounts and document the problem.
7. Ask what information your child's school retains
You can also contact your child's school district to better understand how it handles student records. Ask what information outside contractors receive and how long they retain it. Schools may have legal obligations to maintain certain records. Still, parents can ask about retention policies and security safeguards. This conversation is worthwhile regardless of where your family lives.
Kurt's key takeaways
I've covered plenty of data breaches over the years, but this one bothers me because we're talking about children who had no choice about handing over their information. They went to school, took required tests and trusted the adults and organizations handling their records. Now, some of those details have ended up in the wrong hands. What I find especially troubling is how far back some of these records could go. Think about someone who left California years ago and has no reason to believe their old student information is still sitting on a testing company's system. That person could be living on the opposite side of the country and suddenly have to worry about a breach involving records from childhood. I appreciate that ETS is offering free identity protection, but I'd like to see schools and testing companies explain more clearly how long they keep sensitive student information and why. Parents deserve answers before a breach happens.
Should schools and outside testing companies be allowed to keep sensitive student records for years after a child leaves, or should families have more control over when that information gets deleted? Let us know by writing to us at CyberGuy.com.
Sign up for my FREE CyberGuy Newsletter
Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox.
For simple, real-world ways to spot scams early and stay protected, visit CyberGuy.com – trusted by millions who watch CyberGuy on TV daily.
Plus, you'll get instant access to my Ultimate Scam Survival Guide free when you join.
Federal law enforcement authorities have launched a nationwide crackdown dubbed, "Operation Ghostbusters," to dismantle an international student aid scheme that investigators estimate has been operating since 2021, "potentially reaching several hundred million dollars" in taxpayer losses.
Announcing the first wave of enforcement actions, Assistant Attorney General Colin McDonald revealed that organized syndicates have systematically stolen the identities of working Americans who never applied to college, using their information to enroll fictional "ghost students" at institutions nationwide and siphon federal financial aid directly into offshore accounts.
"These are not isolated errors," McDonald said at a news conference Thursday. "This is organized fraud at scale."
The sprawling operation currently spans more than 40 open cases across 26 FBI field offices and has already produced indictments against five defendants, as well as the international seizure of more than $750,000 in laundered cryptocurrency tied to networks in Kenya.
"If successful at duping the Department of Education, Ed then sends the aid money to the college where the ghost student is enrolled," McDonald said in his opening remarks. "After tuition and fees are deducted, the leftover federal funds are deposited directly into bank accounts controlled by fraudsters, and in a flash, the money vanishes, often overseas to places like Kenya.
"The methods used in these schemes are increasingly sophisticated.
"Some use super intelligence to fill out college applications and complete coursework, so it looks like the ghost student is actually completing the class.
"Some even create the appearance of a fake student in an online classroom to trick schools into believing a real person is present. The goal is to keep the ghost student in school for as long as possible, semester after semester after semester, stealing money from the taxpayer."
Prosecutors allege that after tuition and fees were settled, leftover grant and loan disbursements were siphoned through domestic "money mules" and funneled abroad – including through fronts like a Nairobi safari company.
"We have already sent a team to Kenya to be on the ground for purposes of rooting out this fraud scheme and figuring out how it works on the ground in Kenya," McDonald said in the question and answer portion of the news conference.
And, unsuspecting victims facing ruined credit and bills for an education they never received, they warned.
"The complete story includes the plight of an American citizen who graduated high school and went straight to work to provide for his family," McDonald said. "He never applied to college, he never enrolled in classes, and he never asked for federal student aid. But one day, he finds his name attached to a loan from a school hundreds or thousands of miles away.
"His credit is now at risk and his name is on the bill."
McDonald's timeline for the investigation began in earnest in April and includes alleged fraud that began in 2021 under the Biden administration, according to McDonald.
"If you steal American identities, if you steal taxpayer dollars, if you exploit programs meant to help students build their future, we are resolved to find you and prosecute you," he said. "Whether you're in Nebraska, New Jersey, Virginia, or Nairobi, we will pursue you and bring you to justice."
"When we walked in the door last January, we were extremely troubled to find that the Biden administration had turned off nearly every fraud detection measure, allowing critical funds to become the target of large-scale fraud," Kent said. "The federal student aid programs result in about a $1.7 trillion federal student loan portfolio. That's like turning off fraud detection efforts at Wells Fargo, which is just crazy."
Portland Public Schools rescinded its trespass order against an Oregon mother over her opposition to the district's gender curriculum, according to a legal group representing the parent.
In August, Allison Roberts sued Portland Public Schools after she expressed concern last year over Meriwether Lewis Elementary School's decision to repaint its traditional rainbow pride flag into an "Intersex-Inclusive Progress" variant to include support for racial inclusion and transgender rights.
Roberts also discovered an "identity flower" assignment given to her 11-year-old child that asked students to identify and discuss their gender identity with classmates and teachers.
After receiving what she described as an unsatisfactory response from the school, Roberts wrote an open letter to the community criticizing the school's policies, which she distributed on a public sidewalk outside school property.
The school later accused Roberts of "harassment, intimidation and threatening behavior" as part of a pattern of "animus and harassment targeting vulnerable members of [the] community." The district issued Roberts a one-year trespass order barring her from attending school events, including her child's graduation ceremony.
According to the Liberty Justice Center, which represented Roberts, Portland Public Schools agreed to several concessions before a scheduled hearing on Roberts’ motion for a preliminary injunction. These included rescinding her campus ban, exempting her children from certain LGBTQ2SIA+-related curriculum requirements and reviewing its nondiscrimination and anti-harassment policy.
In a statement to Fox News Digital, Portland Public Schools confirmed the school district "agreed to rescind the trespass notice in mid-November."
"PPS has and will continue to comply with all laws that serve and protect children," the district's statement read.
Timothy Snowball, lead attorney for the Liberty Justice Center's PARENTS Initiative, called the concessions a "victory" and told Fox News Digital they were a sign of the school district recognizing that these actions were unconstitutional.
"The timing of this settlement is not a coincidence," he said. "Only two days before the negotiations started, the district was set on fighting Allison Roberts. But after an hour or two with a federal judge explaining to them why their conduct was unconstitutional, they immediately changed their plans.
"Just goes to show that the students aren’t the only ones in Portland who need an education on basic civics."
Another hearing on the district's policies is scheduled for Dec. 1 with a focus on policies Snowball said allow teachers to withhold information from parents.
"Portland Public Schools tried to silence a mother who dared to question what was happening in her children’s school. Now the district has agreed to withdraw its warning, rescind its campus ban and recognize her right to speak freely," Snowball said in a separate statement.
"This is a major victory, not just for Allison Roberts, but for every parent who has been told to stay quiet and leave these decisions to school officials," the statement continued.
"But the fight is not over. The district continues to defend policies that allow school officials, under certain circumstances, to withhold important information from parents about their own children.
"Parents have the fundamental right to direct their children’s upbringing and education. We intend to keep fighting until those rights are protected."
Roberts previously told Fox News Digital she had received widespread support for her legal efforts.
"It has been heartening to see the outpouring of support from my local Portland community and from parents and grandparents across the country," she said.
"I never wanted things to get to this point. But knowing that I'm fighting this battle not just for my family, but for millions of American families, reassures me that bringing this suit is the right thing to do."
Login
