The O'Farrell Charter School
bd_dad5dff18eca4525 · schema v1 · pii pii-v1
Full breach record for The O'Farrell Charter School →The O'Farrell Charter School notified staff and families of a cybersecurity incident involving its third-party Student Information System vendor, PowerSchool. The incident was discovered on December 28, 2024, and the school was notified on January 7, 2025. Compromised data primarily includes contact information (names, addresses) for students and staff. PowerSchool indicated that SSNs and medical information may have been affected across its customer base, but specific impact on this school's PII was still under investigation at the time of notification. The school implemented enhanced security measures and monitoring. PowerSchool engaged Experian to provide identity protection services.
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-597885
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 28, 2025
- Raw hash
- a43431929666f7a55a91b2dccefe192ec20cfcf2974f4081d658b8782afc617d
Reporting entity
- Name
- The O'Farrell Charter Schoolnorm: the o farrell charter school
Victim entity
- Name
- The O'Farrell Charter Schoolnorm: the o farrell charter school
Incident
- Discovered
- Dec 28, 2024
- Materiality determined
- —
- Notification sent
- Jan 17, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICPII
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain Compromise
- Threat actor
- External
- Third party
- via PowerSchool
- Initial access
- supply_chain
Compliance
- Time to disclose
- 4 weeks(31 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 20d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Dec 28, 2024→ Notified: Jan 17, 202520d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.