DisclosureLens
HackingEducationEducationVulnerability ExploitSupply Chain (3P Vendor)Customer Data InvolvedDelayed DiscoveryIdentity (basic)CredentialsEducationLowContained

ABC Unified School District

bd_de08779068bfa37b · schema v1 · pii pii-v1

Severity

Low

Discovered

May 12, 2020

Filed

Jun 5, 2020

To disclose

24 days

Affected

Not disclosed

Confidence

65%
Full breach record for ABC Unified School District →

ABC Unified School District notified families of a data breach involving the Aeries Portal student information system. The breach occurred on November 4, 2019, when Aeries Software, Inc. suffered a software vulnerability exploit. The district was informed on May 12, 2020. Exposed data included parent and student names, addresses, email addresses, student IDs, and password hashes. No SSNs were exposed. The vendor patched the vulnerability, and the district forced password resets. Law enforcement is investigating.

California clockDiscovered May 12, 2020 → Notified May 13, 20201d ✓ CA 60-day OK24 days discovery → filing

Incident timeline

undetected · 190 days
discovery → filing · 24 days

Nov 4, 2019

Begins

May 12, 2020

Discovered

Jun 5, 2020

Filed

vs. sector median

4 wks faster

Part of Aeries supply-chain incident (2020) — a supply-chain cascade affecting multiple organizations.View cascade →
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.