AccidentalMisconfigurationSupply Chain (3P Vendor)Customer Data InvolvedPIIIDENTITY_BASICEDUCATIONLowResolved
Da Vinci Schools
bd_92717e8a9c6ff6f2 · schema v1 · pii pii-v1
Full breach record for Da Vinci Schools →Da Vinci Schools notified the California AG of a data breach involving student information stored with third-party vendor Schoolzilla. A configuration error exposed backup files, which were accessed and deleted by a security researcher on April 4, 2017. Affected data included student names, IDs, grades, and test scores. No SSNs or financial data were involved. The vendor fixed the error and confirmed data deletion.
California clockDiscovered Apr 4, 2017 → Notified May 25, 201751d ✓ CA 60-day OK8 weeks discovery → filing
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-69171
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 30, 2017
- Raw hash
- 5129c2ad68fb0667d0c31d052a77ad86b596b70e63e184cc29d7236b6abe5800
Reporting entity
- Name
- Da Vinci Schoolsnorm: da vinci schools
- Domain
- davincischools.org
Victim entity
- Name
- Da Vinci Schoolsnorm: da vinci schools
- Domain
- davincischools.org
Incident
- Discovered
- Apr 4, 2017
- Materiality determined
- —
- Notification sent
- May 25, 2017
- Affected individuals
- Not disclosed
- Data types
- PIIIDENTITY_BASICEDUCATION
- Attack vector
- Misconfiguration
- Threat actor
- External
- Third party
- via Schoolzilla PBC Inc. DBA Schoolzilla Inc.
Compliance
- Time to disclose
- 8 weeks(56 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 51d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Apr 4, 2017→ Notified: May 25, 201751d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.