AccidentalEducationEducationMisconfigurationVulnerability ExploitSupply Chain (3P Vendor)Customer Data InvolvedPIICREDENTIALSPHIIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICEDUCATIONMINORAUTHENTICATIONMediumResolved
Alliance College-Ready Public Schools
bd_2fedcde1cf119966 · schema v1 · pii pii-v1
Full breach record for Alliance College-Ready Public Schools →Alliance College-Ready Public Schools notified students and parents of a data breach involving Schoolzilla Inc., a third-party school data platform. A security researcher discovered a vulnerability in the Schoolzilla system on approximately April 4, 2017. The researcher accessed partial student records including credentials, PII, health information, and academic data. Schoolzilla fixed the vulnerability and verified the researcher deleted all accessed data.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-102921
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 23, 2017
- Raw hash
- f2e5a56874af9c494c86ec458ce888e5ab95a9bbeac05c741dd40df577ac0c09
Reporting entity
- Name
- Alliance College-Ready Public Schoolsnorm: alliance college ready public schools
- Domain
- laalliance.org
Victim entity
- Name
- Alliance College-Ready Public Schoolsnorm: alliance college ready public schools
- Domain
- laalliance.org
- Industry
- Educationllm
Incident
- Discovered
- —
- Materiality determined
- —
- Notification sent
- Jun 30, 2017
- Affected individuals
- Not disclosed
- Data types
- PIICREDENTIALSPHIIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICEDUCATIONMINORAUTHENTICATION
- Attack vector
- Misconfiguration
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Third party
- via Schoolzilla Inc.
- Initial access
- exploit_public_facing
Compliance
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.