HackingSupply Chain (3P Vendor)Customer Data InvolvedEmployee Data InvolvedIDENTITY_BASICEDUCATIONLowActive
Bonita Unified School District
bd_3f4fb95566f71a5c · schema v1 · pii pii-v1
Full breach record for Bonita Unified School District →Ramona Unified School District notified families on Jan 9, 2025, of a cybersecurity incident involving its student information system vendor, PowerSchool. PowerSchool reported unauthorized access to customer data occurring on Dec 22, 2024, which was discovered on Jan 7, 2025. Compromised data includes parent and student contact information (names, addresses). The investigation is ongoing to determine if further PII was accessed. Credit monitoring may be offered.
California clockDiscovered Jan 7, 2025 → Notified Jan 9, 20252d ✓ CA 60-day OK6 days discovery → filing
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-597307
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 13, 2025
- Raw hash
- dc613a5b5aed3a7da8209be21f5692df85ae3b24d160bfa24702979158f00e34
Reporting entity
- Name
- Bonita Unified School Districtnorm: bonita unified school district
- Domain
- do.bonita.k12.ca.us
Victim entity
- Name
- Bonita Unified School Districtnorm: bonita unified school district
- Domain
- do.bonita.k12.ca.us
Incident
- Discovered
- Jan 7, 2025
- Materiality determined
- —
- Notification sent
- Jan 9, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICEDUCATION
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain Compromise
- Threat actor
- External
- Third party
- via PowerSchool
- Initial access
- supply_chain
Compliance
- Time to disclose
- 6 days(6 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 2d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Jan 7, 2025→ Notified: Jan 9, 20252d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.