DisclosureLens
HackingEducationEducationVulnerability ExploitSupply Chain (3P Vendor)Customer Data InvolvedEmployee Data InvolvedIdentity (basic)CredentialsLowContained

Yucaipa-Calimesa Joint Unified School District

bd_532a020c8b5a1f13 · schema v1 · pii pii-v1

Severity

Low

Discovered

May 4, 2020

Filed

Jun 2, 2020

To disclose

29 days

Affected

Not disclosed

Confidence

65%

Yucaipa-Calimesa Joint Unified School District notified parents that an unauthorized individual exploited a vulnerability in the Aeries Student/Parent Portal software. The incident occurred on November 4, 2019, but the District was notified by Aeries on May 4, 2020. Affected data included parent/student names, home addresses, phone numbers, email addresses, and hashed passwords. The District required password changes and installed a software patch provided by Aeries.

California clockDiscovered May 4, 2020 → Notified May 26, 202022d ✓ CA 60-day OK29 days discovery → filing

Incident timeline

undetected · 182 days
discovery → filing · 29 days

Nov 4, 2019

Begins

May 4, 2020

Discovered

Jun 2, 2020

Filed

Part of Aeries supply-chain incident (2020) — a supply-chain cascade affecting multiple organizations.View cascade →
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.