HackingEducationEducationStolen CredentialsCustomer Data InvolvedPIIIdentity (basic)LowContained

Morgan Hill Unified School District

bd_db8aede92876eb4f · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Jan 27, 2023

To disclose

—

Affected

Not disclosed

Confidence

66%

Full breach record for Morgan Hill Unified School District →

Morgan Hill Unified School District experienced unauthorized access to an employee's email account between September 11, 2022, and October 11, 2022. The attacker used valid credentials to access the account, potentially viewing emails and attachments containing personal information of students and staff. The district secured the account, engaged a cybersecurity firm, and notified law enforcement. Affected individuals were offered one year of complimentary credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

Sep 11, 2022

Begins

Jan 27, 2023

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: Morgan Hill Unified School District
norm: morgan hill unified school district
Domain: mhusd.org

Name: Morgan Hill Unified School District
norm: morgan hill unified school district
Domain: mhusd.org
Industry: Educationllm

Discovered: —
Breach occurred: Sep 11, 2022 – Oct 11, 2022
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: PIIIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1114 Email Collection
Threat actor: External
Initial access: valid_credentials

During the incident: Immediately took steps to secure the account
Engaged a cybersecurity firm
Conducted an investigation
Worked closely with law enforcement and cybersecurity professionals
Offered complimentary one-year membership to Experian’s IdentityWorks credit monitoring service
Changes made: Enhanced existing security measures
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-562349
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 27, 2023
Raw hash: 0225ebca26da389764face4d53ffcd7ab5c08ec5dbb9850dee10e463033e5479

Reporting entityMorgan Hill Unified School District

Victim entityMorgan Hill Unified School District

IncidentUnauthorized Access

Stated responseImmediately took steps to secure the account

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov