Wiseburn Unified School District

Wiseburn Unified School District notified the California Attorney General of a data breach involving student information stored with third-party vendor Schoolzilla. On April 4, 2017, a configuration error exposed backup files containing personally identifiable student information (names, IDs, grades, test scores) for students at several Wiseburn schools. A 'white hat' security researcher discovered the vulnerability, downloaded the files, and immediately notified Schoolzilla. The researcher affirmed under penalty of perjury that they deleted the data and did not share it. Schoolzilla fixed the error on April 5, 2017. No social security numbers or financial data were involved.