--- title: Data of more than 45,000 NYC students stole in MOVEit Breach description: Attackers have stolen sensitive personal information from the MOVEit Transfer server of the New York City Department of Education (NYC DOE), affecting approximately 45,000 students. canonical_url: https://www.acronis.com/en/tru/posts/data-of-more-than-45-000-nyc-students-stole-in-moveit-breach/ locale: en last_updated: 2026-10-27 --- * [Home](https://www.acronis.com/en/tru/) * [Articles](https://www.acronis.com/en/tru/posts/) * [Acronis Threat Research Unit](https://www.acronis.com/en/tru/authors/acronis-threat-research-unit/) 18 July 2023 # Data of more than 45,000 NYC students stole in MOVEit Breach Attackers have stolen sensitive personal information from the MOVEit Transfer server of the New York City Department of Education (NYC DOE), affecting approximately 45,000 students. Author: **[Acronis Threat Research Unit](https://www.acronis.com/en/tru/authors/acronis-threat-research-unit/)** Attackers have stolen sensitive personal information from the MOVEit Transfer server of the New York City Department of Education (NYC DOE), affecting approximately 45,000 students. The NYC DOE used the managed file transfer (MFT) software for secure data exchange with vendors, including special education service providers. The servers were patched after the developer disclosed the exploited vulnerability (CVE-2023-34362), but the attackers had already conducted large-scale zero-day attacks. The affected server was taken offline, and NYC DOE is collaborating with NYC Cyber Command to address the incident. An internal investigation revealed that around 19,000 documents were accessed without authorization, compromising data such as Social Security Numbers and employee ID numbers of approximately 45,000 students, DOE staff and service providers. The FBI is investigating the breach, for which the Clop ransomware gang has claimed responsibility. The [Advanced Data Loss Prevention pack](https://www.acronis.com/en-us/products/cloud/cyber-protect/data-loss-prevention/) for Acronis Cyber Platform (formerly Acronis Cyber Protect Cloud) monitors access to your data and helps to prevent any data exfiltration. Related articles [The Gentlemen: A closer look at a not-so-gentle ransomware-as-a- service operation](https://www.acronis.com/en/tru/posts/the-gentlemen-a-closer-look-at-a-not-so-gentle-ransomware-as-a-service-operation/) [Acronis AI Copilot: Adoption is high and growing among MSPs](https://www.acronis.com/en/tru/posts/acronis-ai-copilot-adoption-is-high-and-growing-among-msps/) [Acronis Cyberthreats Update, October 2026](https://www.acronis.com/en/tru/posts/acronis-cyberthreats-update-october-2026/) [AI agents at work: What Acronis endpoint data reveals about MSP and SMB usage](https://www.acronis.com/en/tru/posts/ai-agents-at-work-what-acronis-endpoint-data-reveals-about-msp-and-smb-usage/)