HackingEducationGovernmentEducationStolen CredentialsSupply Chain (3P Vendor)Customer Data InvolvedDelayed DiscoveryCREDENTIALSIDENTITY_BASICLowActive
El Dorado County Office of Education
bd_1ea603441b9f0380 · schema v1 · pii pii-v1
Full breach record for El Dorado County Office of Education →El Dorado County Office of Education notified parents of Charter Alternative Program of unauthorized access to the Aeries Student Information System on approximately November 4, 2019. The breach exposed parent and student login information, password hashes, physical addresses, and email addresses. Notification was sent on May 19, 2020. Local and federal law enforcement were notified and charges were filed against one individual. Passwords were reset and stricter password policies were enforced.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-191009
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 17, 2020
- Raw hash
- fa2654a587e581669a20b620a9f2220c705f517e6c72702351a2219e257a02bf
Reporting entity
- Name
- El Dorado County Office of Educationnorm: el dorado county office of education
- Domain
- edcoe.org
Victim entity
- Name
- El Dorado County Office of Educationnorm: el dorado county office of education
- Domain
- edcoe.org
- Industry
- EducationllmGovernmentllm
Incident
- Discovered
- —
- Materiality determined
- —
- Notification sent
- May 19, 2020
- Affected individuals
- Not disclosed
- Data types
- CREDENTIALSIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1110 Brute ForceT1530 Data from Cloud Storage Object
- Threat actor
- External
- Regulator citations
- Local and federal law enforcement officials were notified of the incidentCharges were filed on a single individual
- Third party
- via Aeries Software
Compliance
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.