HackingCustomer Data InvolvedIDENTITY_BASICCREDENTIALSLowContained
Aeries
bd_733c1d55cc7f4e75 · schema v1 · pii pii-v1
Full breach record for Aeries →Aeries Software, Inc. notified customers of unauthorized access to the Aeries Student Information System. In late November 2019, the company detected unauthorized access attempts. Investigation revealed that parent and student login information, physical addresses, emails, and password hashes were accessed. The perpetrators were taken into custody and access was terminated. Aeries deployed security patches and engaged third-party auditors.
California clockDiscovered Nov 1, 2019 → Notified Apr 27, 2020178d ✗ CA 60-day late29 weeks discovery → filing
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-190283
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 21, 2020
- Raw hash
- be0ae1a86f0aa71d7a69f0f6eff8360070185071c3cf2830b5dd9613a81c62b1
Reporting entity
- Name
- Aeriesnorm: aeries
- Domain
- aeries.com
Victim entity
- Name
- Aeriesnorm: aeries
- Domain
- aeries.com
Incident
- Discovered
- Nov 1, 2019
- Materiality determined
- —
- Notification sent
- Apr 27, 2020
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICCREDENTIALS
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Working closely with local law enforcement and federal authorities
Compliance
- Time to disclose
- 29 weeks(202 days from discovery to filing)
- Compliance flags
- CA 60-day late · 178d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Nov 1, 2019→ Notified: Apr 27, 2020178d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.