HackingEducationEducationEmployee Data InvolvedIdentity (basic)Government IDHealth (basic)MediumContained

Hesperia Unified School District

bd_dd0faa3ad0cbf0d1 · schema v1 · pii pii-v1

Severity

Medium

Discovered

May 8, 2024

Filed

Jun 12, 2024

To disclose

5 weeks

Affected

Not disclosed

Linked

2 records

Confidence

66%

Full breach record for Hesperia Unified School District →

Hesperia Unified School District experienced a security incident between May 4 and May 8, 2024, involving unauthorized access to employee files. Affected data includes names, driver's license numbers, Social Security numbers, and potentially health insurance/medical information. The district secured its network, engaged cybersecurity experts, and offered one year of identity monitoring to affected employees.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 4 days

discovery → filing · 5 weeks / 35 days

May 4, 2024

Begins

May 8, 2024

Discovered

Jun 12, 2024

Filed

This filing is one of 2 records about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitelockbit_3bd_33ca7d9f2b1aee742024-05-13 · +29dCandidate

Name: Hesperia Unified School District
norm: hesperia unified school district
Domain: hesperiausd.org

Name: Hesperia Unified School District
norm: hesperia unified school district
Domain: hesperiausd.org
Industry: Educationllm

Discovered: May 8, 2024
Breach occurred: May 4, 2024 – May 8, 2024
Undetected for: 4 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDHealth (basic)
Data elements: Social Security numberMedical information
Attack vector: Unknown
Threat actor: External

During the incident: Took immediate steps to secure our network
Launched an investigation with assistance from cybersecurity experts
Implemented additional security measures to enhance our existing cybersecurity protocols
Offering a complimentary one-year membership to Experian’s IdentityWorks
Changes made: Implemented additional security measures to enhance our existing cybersecurity protocols
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 5 weeks(35 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-586867
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 12, 2024
Raw hash: 9a243ce0541a90b8812909685a87612e35a3a45c70b6ab7c8628fee9f2786417

Linked disclosures

Ransomware claims (1)

Reporting entityHesperia Unified School District

Victim entityHesperia Unified School District

Incidentdiscovered May 8, 2024

Stated responseTook immediate steps to secure our network

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov