HackingEducationEducationVulnerability ExploitSupply Chain (3P Vendor)Customer Data InvolvedDownstream VictimsN-DayPatch Available Not AppliedIDENTITY_BASICCREDENTIALSLowContained
San Bernardino City Unified School District
bd_076a6033d47c43a0 · schema v1 · pii pii-v1
Full breach record for San Bernardino City Unified School District →San Bernardino City Unified School District notified parents and guardians that Aeries Software, its third-party Student Information System provider, disclosed in April 2020 that an unauthorized individual exploited a vulnerability in the Aeries software in late November 2019. The breach potentially exposed parent and student names, home addresses, phone numbers, email addresses, and hashed passwords. Aeries patched the vulnerability and law enforcement is involved.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-190582
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 2, 2020
- Raw hash
- 2553d21a09bf72453b71a248e1a4d0d4e3445242fadc89c56ae1ee01c1269285
Reporting entity
- Name
- San Bernardino City Unified School Districtnorm: san bernardino city unified school district
- Domain
- sbcusd.com
Victim entity
- Name
- San Bernardino City Unified School Districtnorm: san bernardino city unified school district
- Domain
- sbcusd.com
- Industry
- Educationllm
Incident
- Discovered
- —
- Materiality determined
- —
- Notification sent
- May 28, 2020
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICCREDENTIALS
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1078 Valid Accounts
- Threat actor
- External
- Third party
- via Aeries Software
- Initial access
- exploit_public_facing
Compliance
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.