HackingVulnerability ExploitData ExfiltratedDelayed DiscoveryIDENTITY_BASICCREDENTIALSLowContained
Yuba City Unified School District
bd_8f5d6354ae730768 · schema v1 · pii pii-v1
Full breach record for Yuba City Unified School District →Yuba City Unified School District notified California AG in November 2019 regarding a data breach involving its Aeries Student Information System. An unauthorized individual exploited a software vulnerability to potentially access parent and student data, including names, addresses, emails, and hashed passwords. The District reset all passwords, patched the vulnerability, and cooperated with law enforcement.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-190824
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 11, 2020
- Raw hash
- 460cd88d178732a032164ea2eadbae0092abb7c72c0dd84f2b69b75ffdaa1692
Reporting entity
- Name
- Yuba City Unified School Districtnorm: yuba city unified school district
- Domain
- ycusd.org
Victim entity
- Name
- Yuba City Unified School Districtnorm: yuba city unified school district
- Domain
- ycusd.org
Incident
- Discovered
- Nov 4, 2019
- Materiality determined
- Nov 4, 2019
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICCREDENTIALS
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 31 weeks(220 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.