DisclosureLens
HackingEducationEducationVulnerability ExploitSupply Chain (3P Vendor)Data ExfiltratedCustomer Data InvolvedPIIIdentity (basic)EducationHealth (basic)BehaviorMinorMediumContained

Riverside County Office of Education

bd_91f6ea429604fa41 · schema v1 · pii pii-v1

Severity

Medium

Discovered

May 31, 2023

Filed

Dec 15, 2023

To disclose

28 weeks

Affected

Not disclosed

Confidence

65%
Full breach record for Riverside County Office of Education3 incidents on file

Riverside County Office of Education notified parents of a data breach involving student information. The incident resulted from a global cybersecurity issue with Progress Software's MOVEit Transfer solution, where unauthorized actors exploited a previously unknown vulnerability. Between May 27 and May 31, 2023, an unauthorized third party obtained files containing student names, academic records, behavior information, enrollment data, special education details, disability codes, dates of birth, and demographic information. No Social Security numbers or financial data were involved. The district engaged cybersecurity experts, secured its MOVEit repository, reported to law enforcement, and offered one year of identity monitoring services to affected families.

Incident timeline

undetected · 4 days
discovery → filing · 28 weeks / 198 days

May 27, 2023

Begins

May 31, 2023

Discovered

Dec 15, 2023

Filed

vs. sector median

+20 wks slower

Part of Progress Software Corporation supply-chain incident (2023) — a supply-chain cascade affecting multiple organizations.View cascade →
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.