HackingEducationEducationStolen CredentialsData ExfiltratedCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDHealth (basic)CredentialsMinorMediumContained

Bonita Unified School District

bd_4fd9ce6f57948fc6 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jun 2, 2015

Filed

Jul 1, 2015

To disclose

29 days

Affected

Not disclosed

Confidence

65%

Full breach record for Bonita Unified School District →2 incidents on file

Bonita Unified School District disclosed unauthorized access to its student information system at San Dimas High School. Unidentified individuals accessed and downloaded personal information for students, including names, SSNs, birthdates, medical info, and credentials, in May 2015. The breach was discovered on June 2, 2015. The district reported the incident to law enforcement and offered one year of identity monitoring via Experian.

J jump to incidentP pin to compareR raw source

California clockDiscovered Jun 2, 2015 → Notified Jun 30, 201528d ✓ CA 60-day OK29 days discovery → filing

Incident timeline

undetected · 32 days

discovery → filing · 29 days

May 1, 2015

Begins

Jun 2, 2015

Discovered

Jul 1, 2015

Filed

vs. sector median

6 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: Bonita Unified School District
norm: bonita unified school district
Domain: do.bonita.k12.ca.us

Name: Bonita Unified School District
norm: bonita unified school district
Domain: do.bonita.k12.ca.us
Industry: Educationllm

Discovered: Jun 2, 2015
Breach occurred: May 1, 2015 – May 31, 2015
Undetected for: 32 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jun 30, 2015
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDHealth (basic)CredentialsMinor
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Reported the incident to law enforcement

During the incident: Reported the incident to law enforcement
Conducted an investigation to determine what information may have been changed
Cooperating with law enforcement in its investigation of this incident
Providing you with a complimentary one-year membership in ProtectMyID Alert from Experian
Changes made: Reviewing and increasing information security measures within the district
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 29 days(29 days from discovery to filing)
Compliance flags: CA 60-day OK · 28d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: Jun 2, 2015
→ Notified: Jun 30, 2015
28d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK

Statute	Window	Elapsed	Threshold	Status
California	Discovered: Jun 2, 2015 → Notified: Jun 30, 2015	28d	60 days (analyst band, pre-2026 discoveries)	CA 60-day OK

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-56705
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 1, 2015
Raw hash: 8f45c3396ccc41664c217f005766cb3521344d6d5349a38c96e04a641f13b42f

Reporting entityBonita Unified School District

Victim entityBonita Unified School District

Incidentdiscovered Jun 2, 2015

Stated responseReported the incident to law enforcement

ComplianceCA 60-day OK

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov