AccidentalMisdeliveryEmployee Data InvolvedCustomer Data InvolvedIDENTITY_BASICCREDENTIALSEDUCATIONLowContained
San Francisco Unified School District
bd_ca2c37c3545f2f71 · schema v1 · pii pii-v1
Full breach record for San Francisco Unified School District →On April 10, 2019, San Francisco Unified School District staff mistakenly shared an electronic document containing student names, IDs, and default passwords for current and former Buena Vista Horace Mann students with the school community. The data was accessible for approximately two hours. SFUSD reset passwords for all impacted students as a precaution. No unauthorized access was confirmed.
California clockDiscovered Apr 10, 2019 → Notified Apr 12, 20192d ✓ CA 60-day OK21 days discovery → filing
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-146782
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 1, 2019
- Raw hash
- 40bb7a67e1940007e2f48f4731c6fed75cdf6715bfba4ca31a1807d018e84faa
Reporting entity
- Name
- San Francisco Unified School Districtnorm: san francisco unified school district
Victim entity
- Name
- San Francisco Unified School Districtnorm: san francisco unified school district
Incident
- Discovered
- Apr 10, 2019
- Materiality determined
- —
- Notification sent
- Apr 12, 2019
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICCREDENTIALSEDUCATION
- Attack vector
- Unknown
- Threat actor
- Internal
Compliance
- Time to disclose
- 21 days(21 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 2d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Apr 10, 2019→ Notified: Apr 12, 20192d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.