HackingEducationEducationData ExfiltratedCustomer Data InvolvedDelayed DiscoveryIdentity (basic)Government IDMediumContained

Alisal Union Schol District

bd_d974a9f9ffa81f0c · schema v1 · pii pii-v2

Severity

Medium

Discovered

Jun 22, 2026

Filed

Oct 7, 2026

To disclose

15 weeks

Affected

Not disclosed

Confidence

69%

Full breach record for Alisal Union Schol District →

Alisal Union School District notified the California Attorney General of a data breach where unauthorized access occurred on June 19, 2026. The district identified unusual activity on June 22, 2026, and engaged third-party specialists. Investigation confirmed that certain information, including names and Social Security numbers, may have been accessed or downloaded. The district restored operations from backups and offered 12 months of credit monitoring to affected individuals.

J jump to incidentP pin to compareR raw source

California clockDiscovered Jun 22, 2026 → Notified Oct 7, 2026107d ✗ CA 30-day late15 weeks discovery → filing

Incident timeline

undetected · 3 days

discovery → filing · 15 weeks / 107 days

Jun 19, 2026

Begins

Jun 22, 2026

Discovered

Oct 7, 2026

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: Alisal Union Schol District
norm: alisal union schol district

Name: Alisal Union Schol District
norm: alisal union schol district
Industry: Educationllm

Discovered: Jun 22, 2026
Breach occurred: Jun 19, 2026
Undetected for: 3 daysoccurrence → discovery
Materiality determined: —
Notification sent: Oct 7, 2026
Affected individuals: Not disclosed
Data types: Identity (basic)Government ID
Attack vector: Unknown
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Filed breach notification with California Attorney General

During the incident: Engaged third-party computer specialists to investigate and determine the nature and scope of the activity
Took precautionary steps recommended by third-party specialists
Restored and resumed operations using viable backups
Conducted a diligent review of the relevant information to determine the types of information contained therein and to whom the information related
Provided a general notice of this matter to all Alisal Union School District members on August 27, 2026
Offering 12 months of credit monitoring and identity protection services through Experian, at no cost
Changes made: Taken steps to further enhance our existing cybersecurity infrastructure
Implemented additional policies and procedures to minimize the reoccurrence of future similar events
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 15 weeks(107 days from discovery to filing)
Compliance flags: CA 30-day late · 107d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: Jun 22, 2026
→ Notified: Oct 7, 2026
107d 30 calendar days CA 30-day late

Statute	Window	Elapsed	Threshold	Status
California	Discovered: Jun 22, 2026 → Notified: Oct 7, 2026	107d	30 calendar days	CA 30-day late

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-630952
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 7, 2026
Raw hash: 3ae5d527359c6c30c69b1dce4a8ae6d3817ee59a01a57496320a755b55a921a9

Reporting entityAlisal Union Schol District

Victim entityAlisal Union Schol District

Incidentdiscovered Jun 22, 2026

Stated responseEngaged third-party computer specialists to investigate and determine the nature and scope of the activity

ComplianceCA 30-day late

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov