AccidentalGovernmentEducationGovernmentMisdeliveryCustomer Data InvolvedIdentity (basic)Government IDFinancial accountMediumResolved

San Diego County Office of Education

bd_d760931df38d8c77 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Jan 18, 2018

To disclose

—

Affected

1state residents only

Confidence

66%

Full breach record for San Diego County Office of Education →

San Diego County Office of Education (SDCOE) inadvertently emailed a spreadsheet containing employee names, SSNs, and retirement contribution data to 44 school districts in Southern California on December 5, 2017. SDCOE offered 12 months of credit monitoring and notified regulators.

J jump to incidentP pin to compareR raw source

Incident timeline

Dec 5, 2017

Begins

Jan 18, 2018

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident

Name: San Diego County Office of Education
norm: san diego county office of education

Name: San Diego County Office of Education
norm: san diego county office of education
Industry: GovernmentllmEducationllm

Discovered: —
Breach occurred: Dec 5, 2017
Materiality determined: —
Notification sent: —
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government IDFinancial account
Data elements: Social Security number
Attack vector: Unknown
MITRE ATT&CK: T1535 Unused/Unsupported Cloud Storage
Regulator citations: Notified state regulators and consumer reporting agencies

During the incident: Launched an internal investigation
Attempted to recall the email
Requested recipients to securely delete the email
Notified state regulators and consumer reporting agencies
Offered 12 months of free credit monitoring and identity restoration services
Changes made: Reviewing policies to prevent an incident like this from happening again
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/San-Diego-County-Office-of-Education.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 18, 2018
Raw hash: 6dd5acfcd5562edda0c7c6c78afe26a85162ccb49c9195ab239a6bbb13d6344b

Reporting entitySan Diego County Office of Education

Victim entitySan Diego County Office of Education

IncidentUnknown

Stated responseLaunched an internal investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov