Las Lomitas Elementary School District
bd_a02811f28e92dd10 · schema v1 · pii pii-v1
Full breach record for Las Lomitas Elementary School District →Las Lomitas Elementary School District (LLESD) notified the California AG of a data breach involving its Canvas LMS platform. Instructure, the publisher of Canvas, notified LLESD on May 5, 2026, that a criminal threat actor had gained access to LLESD information. The breach affected students in 6th-8th grade during the 2023-2024 school year, their caregivers, and staff. Affected data included first/last names, email addresses, and class enrollments. Instructure stated no passwords, dates of birth, government identifiers, or financial information were involved. LLESD IT confirmed the scope of data. Affected individuals are being contacted directly.
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-623195
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 11, 2026
- Raw hash
- 5e291aef01570a1f05ca83517774ab508ffccd9a71b635b5dd6ee91d39705025
Reporting entity
- Name
- Las Lomitas Elementary School Districtnorm: las lomitas elementary school district
- Domain
- llesd.org
Victim entity
- Name
- Las Lomitas Elementary School Districtnorm: las lomitas elementary school district
- Domain
- llesd.org
Incident
- Discovered
- May 5, 2026
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICEDUCATION
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain Compromise
- Threat actor
- External
- Third party
- via Instructure
- Initial access
- supply_chain
Compliance
- Time to disclose
- 6 days(6 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.