HackingVulnerability ExploitTargetedIDENTITY_BASICCREDENTIALSLowContained
Santa Monica-Malibu Unified School District
bd_7e56f64c40fd7e25 · schema v1 · pii pii-v1
Full breach record for Santa Monica-Malibu Unified School District →Beverly Hills Unified School District notified parents and guardians that an unauthorized individual exploited a vulnerability in the Aeries Student Information System in late 2019. The attacker accessed parent and student data, including names, addresses, emails, and hashed passwords. The District required password resets and applied a software patch from Aeries.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-191685
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 2, 2020
- Raw hash
- 5e007f476903ecc843227315c7d588ec75e73b3d43f72191ec1ebfba3987b892
Reporting entity
- Name
- Santa Monica-Malibu Unified School Districtnorm: santa monica malibu unified school district
- Domain
- smmusd.org
Victim entity
- Name
- Santa Monica-Malibu Unified School Districtnorm: santa monica malibu unified school district
- Domain
- smmusd.org
Incident
- Discovered
- Apr 27, 2020
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICCREDENTIALS
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1078 Valid Accounts
- Threat actor
- External
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 9 weeks(66 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.