DisclosureLens
UnknownEducationEducationCustomer Data InvolvedIdentity (basic)LowContained

Nishiyamato Academy

bd_49723d32e683f91d · schema v1 · pii pii-v2

Severity

Low

Discovered

Mar 27, 2026

Filed

Sep 30, 2026

To disclose

27 weeks

Affected

Not disclosed

Linked

3 filings

Confidence

68%
Full breach record for Nishiyamato Academy →

Nishiyamato Academy notified the California Attorney General of a data security incident. On March 27, 2026, the organization became aware of unauthorized access to its computer network. An investigation revealed that between March 25 and March 28, 2026, files containing personally identifiable information, including full names, were potentially accessed. The organization engaged external cybersecurity professionals and is providing complimentary identity monitoring services to affected individuals. The specific method of unauthorized access was not disclosed.

Incident timeline

undetected · 2 days
discovery → filing · 27 weeks / 187 days

Mar 25, 2026

Begins

Mar 27, 2026

Discovered

Sep 30, 2026

Filed

This filing is one of 3 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Filing propagation · 3 filings · 3 states

View merged incident ↗
California State AG+29d · this page

Pattern: first filing Sep 1 (MA), last Sep 30 (CA) — a 29-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.