Riverside County Office of Education
bd_91f6ea429604fa41 · schema v1 · pii pii-v1
Full breach record for Riverside County Office of Education →Riverside County Office of Education notified parents of a data breach involving student information. The incident resulted from a global cybersecurity issue with Progress Software's MOVEit Transfer solution, where unauthorized actors exploited a previously unknown vulnerability. Between May 27 and May 31, 2023, an unauthorized third party obtained files containing student names, academic records, behavior information, enrollment data, special education details, disability codes, dates of birth, and demographic information. No Social Security numbers or financial data were involved. The district engaged cybersecurity experts, secured its MOVEit repository, reported to law enforcement, and offered one year of identity monitoring services to affected families.
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-578039
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 15, 2023
- Raw hash
- 3d19f0849d758ae025807e54b50380eaa8393148757866328659c12ff082e8eb
Reporting entity
- Name
- Kirkland & Ellis LLPnorm: kirkland ellis
- Domain
- kirkland.com
Victim entity
- Name
- Riverside County Office of Educationnorm: riverside county office of education
- Domain
- rcoe.us
Incident
- Discovered
- May 31, 2023
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- PIIIDENTITY_BASICEDUCATIONHEALTH_BASICBEHAVIORMINOR
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1195 Supply Chain CompromiseT1041 Exfiltration Over C2 Channel
- Threat actor
- External
- Regulator citations
- Reported to law enforcement
- Third party
- via Progress Software
- Initial access
- supply_chain
Compliance
- Time to disclose
- 28 weeks(198 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.