AccidentalEducationEducationMisdeliveryEmployee Data InvolvedGovernment IDMediumResolved

Berkeley Unified School District

bd_1413bd1b939e3886 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Apr 11, 2016

Filed

Apr 22, 2016

To disclose

11 days

Affected

Not disclosed

Confidence

65%

Full breach record for Berkeley Unified School District →

Berkeley Unified School District inadvertently transmitted an electronic file containing employee social security numbers to Bay Area News Group, which was conducting a survey on employee salary information. The file did not contain other confidential information such as addresses or birthdates. The reporter immediately contacted the District, which requested deletion of the file and confirmed it was done. The District provided one year of complimentary identity protection services to affected employees.

J jump to incidentP pin to compareR raw source

California clockDiscovered Apr 11, 2016 → Notified Apr 21, 201610d ✓ CA 60-day OK11 days discovery → filing

Incident timeline

discovery → filing · 11 days

Apr 11, 2016

Begins

Apr 11, 2016

Discovered

Apr 22, 2016

Filed

vs. sector median

9 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: Berkeley Unified School District
norm: berkeley unified school district

Name: Berkeley Unified School District
norm: berkeley unified school district
Industry: Educationllm

Discovered: Apr 11, 2016
Breach occurred: Apr 11, 2016
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Apr 21, 2016
Affected individuals: Not disclosed
Data types: Government ID
Data elements: Social Security number
Attack vector: Unknown
Regulator citations: Notifying the California Attorney General as required by law
Third party: via Bay Area News Group

During the incident: Requested that the reporter delete the files
Transmitted another version of the data requested that did not include confidential data
Secured a one-year, complimentary subscription to an identity protection program provided by Identity Fraud, Inc.
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 11 days(11 days from discovery to filing)
Compliance flags: CA 60-day OK · 10d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: Apr 11, 2016
→ Notified: Apr 21, 2016
10d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK

Statute	Window	Elapsed	Threshold	Status
California	Discovered: Apr 11, 2016 → Notified: Apr 21, 2016	10d	60 days (analyst band, pre-2026 discoveries)	CA 60-day OK

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-61243
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 22, 2016
Raw hash: 913b5715e148ae72098700e521ea377e2b10df0de3310efebc8f4b1aa878c8f0

Reporting entityBerkeley Unified School District

Victim entityBerkeley Unified School District

Incidentdiscovered Apr 11, 2016

Stated responseRequested that the reporter delete the files

ComplianceCA 60-day OK

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov