AccidentalMisconfigurationCustomer Data InvolvedEmployee Data InvolvedPIIIDENTITY_BASICHEALTH_BASICEDUCATIONMINORMediumResolved
Mount Diablo Unified School District
bd_deb53de3bd4c0bf0 · schema v1 · pii pii-v1
Full breach record for Mount Diablo Unified School District →Mt. Diablo Unified School District experienced a data breach on April 27, 2017, due to a software caching malfunction in the HomeLink Portal provided by Eagle Soft and Microsoft. For one hour, approximately 600 families could inadvertently view other students' personally identifiable information, including addresses, phone numbers, immunization records, medical history, grades, and transcripts. No financial information or SSNs were exposed. The district took the portal offline, notified law enforcement and the CA AG, and initiated software audits.
California clockDiscovered Apr 27, 2017 → Notified May 12, 201714d ✓ CA 60-day OK22 days discovery → filing
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed600 affectedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-68975
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 19, 2017
- Raw hash
- 2b4a2d2571feebe0f18782b629078a92b05fbfb1d2e3146d35b80a47e29ac6cb
Reporting entity
- Name
- Mount Diablo Unified School Districtnorm: mount diablo unified school district
Victim entity
- Name
- Mount Diablo Unified School Districtnorm: mount diablo unified school district
Incident
- Discovered
- Apr 27, 2017
- Materiality determined
- —
- Notification sent
- May 12, 2017
- Affected individuals
- 600
- Data types
- PIIIDENTITY_BASICHEALTH_BASICEDUCATIONMINOR
- Attack vector
- Misconfiguration
- Regulator citations
- Reported the breach to the California Office of the Attorney GeneralNotified law enforcement
Compliance
- Time to disclose
- 22 days(22 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 14d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Apr 27, 2017→ Notified: May 12, 201714d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.