DisclosureLens
HackingEducationEducationStolen CredentialsSupply Chain (3P Vendor)Customer Data InvolvedEmployee Data InvolvedIdentity (basic)CredentialsEducationLowContained

Brea-Olinda Unified School District

bd_e365ceae4d14a5eb · schema v1 · pii pii-v1

Severity

Low

Discovered

Apr 27, 2020

Filed

Jun 8, 2020

To disclose

6 weeks

Affected

Not disclosed

Confidence

65%
Full breach record for Brea-Olinda Unified School District →

Brea-Olinda Unified School District notified parents of unauthorized access to the Aeries Student Information System. The incident, occurring on November 4, 2019, was discovered in late April 2020. Exposed data included parent/student login information, physical addresses, email addresses, and password hashes. The breach affected multiple districts via the third-party vendor Aeries. Law enforcement made arrests. The district reset passwords and engaged a third-party auditor.

California clockDiscovered Apr 27, 2020 → Notified Jun 5, 202039d ✓ CA 60-day OK6 weeks discovery → filing

Incident timeline

undetected · 175 days
discovery → filing · 6 weeks / 42 days

Nov 4, 2019

Begins

Apr 27, 2020

Discovered

Jun 8, 2020

Filed

vs. sector median

4 wks faster

Part of Aeries supply-chain incident (2020) — a supply-chain cascade affecting multiple organizations.View cascade →
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.