HackingSupply Chain (3P Vendor)Customer Data InvolvedEmployee Data InvolvedPIIIDENTITY_BASICEDUCATIONEMPLOYMENTHEALTH_BASICLOCATIONLowContained
Salinas City Elementary School District
bd_6dfda2dac39d524c · schema v1 · pii pii-v1
Full breach record for Salinas City Elementary School District →Salinas City Elementary School District notified the California AG of a data breach involving its former student information system provider, PowerSchool. The breach occurred on December 22, 2024, and was discovered on January 7, 2025. Legacy student and staff data (including names, DOBs, addresses, and medical alerts) for individuals enrolled or employed before June 2021 was accessed. PowerSchool is providing two years of identity protection services.
California clockDiscovered Jan 7, 2025 → Notified Jan 24, 202517d ✓ CA 60-day OK20 days discovery → filing
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-597852
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 27, 2025
- Raw hash
- 946a11cfb2fa96098b98ac9380b29c34e92a389b4c703d29ec9138c37037781a
Reporting entity
- Name
- Salinas City Elementary School Districtnorm: salinas city elementary school district
- Domain
- salinascityesd.org
Victim entity
- Name
- Salinas City Elementary School Districtnorm: salinas city elementary school district
- Domain
- salinascityesd.org
Incident
- Discovered
- Jan 7, 2025
- Materiality determined
- —
- Notification sent
- Jan 24, 2025
- Affected individuals
- Not disclosed
- Data types
- PIIIDENTITY_BASICEDUCATIONEMPLOYMENTHEALTH_BASICLOCATION
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain Compromise
- Threat actor
- External
- Regulator citations
- Report this breach to the California Cybersecurity Integration Center (Cal-CSIC)Report this breach to the California Attorney General’s Office
- Third party
- via PowerSchool
- Initial access
- supply_chain
Compliance
- Time to disclose
- 20 days(20 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 17d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Jan 7, 2025→ Notified: Jan 24, 202517d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.