HackingEducationEducationVulnerability ExploitCapture Stored DataSupply Chain (3P Vendor)Customer Data InvolvedN-DayDelayed DiscoveryIdentity (basic)AuthenticationCredentialsLowContained

Inglewood Unified School District

bd_daec79d540c75e7e · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

May 29, 2020

To disclose

—

Affected

Not disclosed

Confidence

75%

Full breach record for Inglewood Unified School District →

Inglewood Unified School District notified California parents and guardians that an unauthorized individual exploited a vulnerability in the Aeries Student Information System in late November 2019. The perpetrator may have accessed parent/student names, home addresses, phone numbers, email addresses, and hashed passwords. Aeries notified the District on April 27, 2020. The vulnerability was remediated by installing a software patch provided by Aeries. Law enforcement investigated and the suspect was reportedly taken into custody.

J jump to incidentP pin to compareR raw source

Incident timeline

Nov 1, 2019

Begins

May 29, 2020

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: Inglewood Unified School District
norm: inglewood unified school district
Domain: inglewoodusd.com

Name: Inglewood Unified School District
norm: inglewood unified school district
Domain: inglewoodusd.com
Industry: Educationllm

Discovered: —
Breach occurred: Nov 1, 2019 – Nov 30, 2019
Materiality determined: —
Notification sent: May 5, 2020
Affected individuals: Not disclosed
Data types: Identity (basic)AuthenticationCredentials
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1078 Valid Accounts
Threat actor: External
Third party: via Aeries Student Information System
Initial access: exploit_public_facing

During the incident: Aeries began an investigation upon discovery
Law enforcement launched an investigation to identify the person responsible
Aeries notified the District on April 27, 2020 that the individual may have accessed the District's Aeries System
Required affected users to change their password the next time they sign into their account
Changes made: Installed the software patch that Aeries made available to remedy the vulnerability that allowed the unauthorized individual to access our Aeries system
We and Aeries are reviewing our existing policies and procedures to mitigate any risk associated with this incident and to better prevent future incidents
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-190498
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 29, 2020
Raw hash: 1865e8c51496d58597b5e6e84e79d0e68df28b8debe8fd2838530fc34b96b61d

Reporting entityInglewood Unified School District

Victim entityInglewood Unified School District

IncidentUnauthorized Access

Stated responseAeries began an investigation upon discovery

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov