UnknownEducationEducationEmployee Data InvolvedIdentity (basic)Government IDHealth (basic)MediumActive

Lodi School District

bd_e14b3d1e823ea60f · schema v1 · pii pii-v1

Severity

Medium

Discovered

Oct 3, 2021

Filed

Nov 5, 2021

To disclose

5 weeks

Affected

Not disclosed

Confidence

66%

Full breach record for Lodi School District →3 incidents on file

Lodi Unified School District notified the California Attorney General of a network disruption occurring between September 20 and October 3, 2021. The incident potentially exposed current and former employee information, including names, Social Security numbers, and possibly medical information. The investigation is ongoing, with no evidence of misuse found to date. The District changed passwords, enhanced security, and offered credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 13 days

discovery → filing · 5 weeks / 33 days

Sep 20, 2021

Begins

Oct 3, 2021

Discovered

Nov 5, 2021

Filed

vs. sector median

4 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: Lodi School District
norm: lodi school district
Domain: lodinjschools.org

Name: Lodi School District
norm: lodi school district
Domain: lodinjschools.org
Industry: Educationllm

Discovered: Oct 3, 2021
Breach occurred: Sep 20, 2021 – Oct 3, 2021
Undetected for: 13 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDHealth (basic)
Data elements: Social Security numberMedical information
Attack vector: Unknown

During the incident: Changed account passwords
Enhanced security protocols
Working with third party specialists to harden our network
Reviewing our policies and procedures related to data protection
Providing access to credit monitoring and identity protection services through Equifax
Changes made: Working with third party specialists to harden our network
Reviewing our policies and procedures related to data protection
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 5 weeks(33 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-547269
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 5, 2021
Raw hash: 3e960932a7aefe347201e44de92ca4057b3abb8385fcf8ec5dc953a7c3d0e38c

Reporting entityLodi School District

Victim entityLodi School District

Incidentdiscovered Oct 3, 2021

Stated responseChanged account passwords

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov