HackingEducationEducationStolen CredentialsSupply Chain (3P Vendor)Data ExfiltratedCustomer Data InvolvedDelayed DiscoveryDownstream VictimsIdentity (basic)CredentialsAuthenticationLowContained

Rocklin Unified School District

bd_8b52c8ace2109b1b · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Jun 2, 2020

To disclose

—

Affected

Not disclosed

Confidence

81%

Full breach record for Rocklin Unified School District →3 incidents on file

Rocklin Unified School District notified families on May 12, 2020 of unauthorized access to Aeries Student Information System (SIS) on November 4, 2019. The breach, affecting RUSD and hundreds of other districts using Aeries, potentially exposed parent/student login information, physical addresses, email addresses, and encrypted passwords. Law enforcement was notified and arrests were made. Passwords were reset for all accounts.

J jump to incidentP pin to compareR raw source

Incident timeline

Nov 4, 2019

Begins

Jun 2, 2020

Filed

Part of Aeries supply-chain incident (2020) — a supply-chain cascade affecting multiple organizations.View cascade →

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: Rocklin Unified School District
norm: rocklin unified school district
Domain: rocklinusd.org

Name: Rocklin Unified School District
norm: rocklin unified school district
Domain: rocklinusd.org
Industry: Educationllm

Discovered: —
Breach occurred: Nov 4, 2019
Materiality determined: —
Notification sent: May 12, 2020
Affected individuals: Not disclosed
Data types: Identity (basic)CredentialsAuthentication
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1078 Valid AccountsT1190 Exploit Public-Facing ApplicationT1114 Email Collection
Threat actor: External
Regulator citations: Local and federal law enforcement officials were notified of the incidentCharges were filed and the people responsible were arrested
Third party: via Aeries
Initial access: supply_chain

During the incident: Immediately contacted Aeries and got confirmation on May 11, 2020 that our data was also accessed
Reset the account passwords for all parents and students beginning Tuesday May 12, 2020
Enforcing stricter password security guidelines as an added precaution
Changes made: Force Users to Change Passwords Every 6 months (minimum)
Days Prior to Expiration to Notify Users - 10 days (minimum)
Minimum Length: 8-16 Characters
Require a Special Character
Require Letters and Numbers
Require Upper and Lower case
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-190573
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 2, 2020
Raw hash: 66f8e61456885ffa5fba051a6dad276eaa4eb9f31abf0ba75e91be6a2aa68a2b

Reporting entityRocklin Unified School District

Victim entityRocklin Unified School District

IncidentThird-Party / Supply Chain

Stated responseImmediately contacted Aeries and got confirmation on May 11, 2020 that our data was also accessed

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov