MalwareRansomwareData EncryptedCustomer Data InvolvedEmployee Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHEALTH_BASICEMPLOYMENTMediumContained
Centinela Valley Union High School District
bd_0489d051e1a414dd · schema v1 · pii pii-v1
Full breach record for Centinela Valley Union High School District →On June 22, 2021, Centinela Valley Union High School District experienced a malware incident that encrypted data on computer systems. The district contained the malware and launched an investigation. On July 8, 2021, it was determined that an unauthorized person accessed systems storing data for current and former employees and students, including names, Social Security numbers, financial accounts, health insurance information, and medical information. The district implemented additional security safeguards and offered one year of identity theft protection services.
California clockDiscovered Jun 22, 2021 → Notified Oct 15, 2021115d ✗ CA 60-day late17 weeks discovery → filing
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-546742
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 21, 2021
- Raw hash
- c21d0e6c83d8444e29badff6d7dbf95bb966f2e3b18da081f3502e7003a26b5a
Reporting entity
- Name
- Centinela Valley Union High School Districtnorm: centinela valley union high school district
Victim entity
- Name
- Centinela Valley Union High School Districtnorm: centinela valley union high school district
Incident
- Discovered
- Jun 22, 2021
- Materiality determined
- —
- Notification sent
- Oct 15, 2021
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHEALTH_BASICEMPLOYMENT
- Attack vector
- Unknown
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1078 Valid Accounts
- Threat actor
- External
Compliance
- Time to disclose
- 17 weeks(121 days from discovery to filing)
- Compliance flags
- CA 60-day late · 115d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Jun 22, 2021→ Notified: Oct 15, 2021115d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.