HackingStolen CredentialsEmployee Data InvolvedCustomer Data InvolvedIDENTITY_BASICPIILowContained
Sunnyvale School District
bd_033820fca8149b86 · schema v1 · pii pii-v1
Full breach record for Sunnyvale School District →Sunnyvale Elementary School District notified residents of multiple states that their information may have been involved in a data security incident. In May 2025, the district identified suspicious activity in its email environment and determined that a limited number of employee email accounts were accessed without authorization. The affected data included names and other personal information. The district engaged forensic experts, secured the email environment, and is offering identity theft protection services.
California clockDiscovered May 1, 2025 → Notified Oct 3, 2025155d ✗ CA 60-day late22 weeks discovery → filing
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-612238
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 3, 2025
- Raw hash
- f93717f5303b5780737db6eb76151ffea09e1abd2316203249b4f4968ff8ad5d
Reporting entity
- Name
- Sunnyvale School Districtnorm: sunnyvale school district
- Domain
- sesd.org
Victim entity
- Name
- Sunnyvale School Districtnorm: sunnyvale school district
- Domain
- sesd.org
Incident
- Discovered
- May 1, 2025
- Materiality determined
- —
- Notification sent
- Oct 3, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICPII
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1114 Email Collection
- Threat actor
- External
Compliance
- Time to disclose
- 22 weeks(155 days from discovery to filing)
- Compliance flags
- CA 60-day late · 155d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: May 1, 2025→ Notified: Oct 3, 2025155d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.