HackingEducationEducationCustomer Data InvolvedDelayed DiscoveryPIIIdentity (basic)LowContained

Inner City Education Foundation

bd_c8ffe96b7ca5c94c · schema v1 · pii pii-v2

Severity

Low

Discovered

Sep 30, 2024

Filed

Oct 16, 2026

To disclose

25 months

Affected

Not disclosed

Linked

2 records

Confidence

68%

Full breach record for Inner City Education Foundation →

Inner City Education Foundation (ICEF) notified the California Attorney General of an unauthorized access incident. An external actor accessed ICEF systems between August 4 and September 29, 2024. ICEF became aware of suspicious activity on September 30, 2024. The investigation determined that certain information was potentially taken. ICEF engaged third-party cybersecurity specialists, strengthened system security, and offered 12 months of credit monitoring to affected individuals. No specific data types were enumerated in the provided notice text, but PII is implied by the context of identity theft protection resources.

J jump to incidentP pin to compareR raw source

California clockDiscovered Sep 30, 2024 → Notified Oct 16, 2026746d ✗ CA 60-day late25 months discovery → filing

Incident timeline

undetected · 57 days

discovery → filing · 25 months / 746 days

Aug 4, 2024

Begins

Sep 30, 2024

Discovered

Oct 16, 2026

Filed

This filing is one of 2 records about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitemedusabd_e606da6b5b45c7312024-10-15 · +731dCandidate

Name: Inner City Education Foundation
norm: inner city education
Domain: icefps.org

Name: Inner City Education Foundation
norm: inner city education
Domain: icefps.org
Industry: Educationllm

Discovered: Sep 30, 2024
Breach occurred: Aug 4, 2024 – Sep 29, 2024
Undetected for: 57 daysoccurrence → discovery
Materiality determined: —
Notification sent: Oct 16, 2026
Affected individuals: Not disclosed
Data types: PIIIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Filed notification with California Attorney General

During the incident: Launched an investigation with the assistance of third-party cybersecurity specialists
Assessed and further strengthened the security of our systems and computer environment
Notified potentially affected individuals
Offering Single Bureau Credit Monitoring/Single Bureau Credit Report/Single Bureau Credit Score services through Cyberscout, a TransUnion company for 12 months, at no cost to you
Changes made: Assessed and further strengthened the security of our systems and computer environment
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 25 months(746 days from discovery to filing)
Compliance flags: CA 60-day late · 746d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: Sep 30, 2024
→ Notified: Oct 16, 2026
746d 60 days (analyst band, pre-2026 discoveries) CA 60-day late

Statute	Window	Elapsed	Threshold	Status
California	Discovered: Sep 30, 2024 → Notified: Oct 16, 2026	746d	60 days (analyst band, pre-2026 discoveries)	CA 60-day late

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-631486
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 16, 2026
Raw hash: 81222ba266f9c98e50146b589f9a36b0545762346341e5135926345218135f7e

Linked disclosures

Ransomware claims (1)

Reporting entityInner City Education Foundation

Victim entityInner City Education Foundation

Incidentdiscovered Sep 30, 2024

Stated responseLaunched an investigation with the assistance of third-party cybersecurity specialists

ComplianceCA 60-day late

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov