AccidentalEducationProfessional ServicesEducationMisdeliveryEmployee Data InvolvedGovernment IDIdentity (basic)EmploymentFinancial accountMediumResolved

Autism Learning Partners

bd_d5923852b9c18ce3 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Mar 15, 2018

Filed

Apr 3, 2018

To disclose

19 days

Affected

Not disclosed

Confidence

64%

Full breach record for Autism Learning Partners →

Autism Learning Partners Holdings, LLC disclosed that on March 15, 2018, an employee inadvertently sent an email containing W-2 forms for all current and former employees to a single former employee who had requested only her own. The exposed data included names, addresses, earnings information, and Social Security numbers. The company engaged Experian to provide one year of identity monitoring to affected individuals and enhanced procedures for handling sensitive employee information.

J jump to incidentP pin to compareR raw source

California clockDiscovered Mar 15, 2018 → Notified Apr 3, 201819d ✓ CA 60-day OK19 days discovery → filing

Incident timeline

discovery → filing · 19 days

Mar 15, 2018

Begins

Mar 15, 2018

Discovered

Apr 3, 2018

Filed

vs. sector median

7 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: Autism Learning Partners
norm: autism learning
Domain: autismlearningpartners.com

Name: Autism Learning Partners
norm: autism learning
Domain: autismlearningpartners.com
Industry: EducationllmProfessional Servicesllm

Discovered: Mar 15, 2018
Breach occurred: Mar 15, 2018
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Apr 3, 2018
Affected individuals: Not disclosed
Data types: Government IDIdentity (basic)EmploymentFinancial account
Attack vector: Unknown
Threat actor: Internal

During the incident: Secured the services of Experian to offer a complimentary, one-year membership in Experian’s IdentityWorks
Changes made: Taken steps to enhance existing procedures related to handling sensitive employee information and quality control
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 19 days(19 days from discovery to filing)
Compliance flags: CA 60-day OK · 19d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: Mar 15, 2018
→ Notified: Apr 3, 2018
19d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK

Statute	Window	Elapsed	Threshold	Status
California	Discovered: Mar 15, 2018 → Notified: Apr 3, 2018	19d	60 days (analyst band, pre-2026 discoveries)	CA 60-day OK

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-134979
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 3, 2018
Raw hash: f57ceb12e5c1a47d97237902d6200f849db83d223d4f2a46601fc19a4c3646d6

Reporting entityAutism Learning Partners

Victim entityAutism Learning Partners

Incidentdiscovered Mar 15, 2018

Stated responseSecured the services of Experian to offer a complimentary, one-year membership in Experian’s IdentityWorks

ComplianceCA 60-day OK

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov