HackingEducationEducationSupply Chain (3P Vendor)Customer Data InvolvedPIIIdentity (basic)EducationHealth (basic)MinorMediumContained

San Gabriel Unified School District

bd_ec34f656c1817bcc · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jan 8, 2022

Filed

Jul 29, 2022

To disclose

29 weeks

Affected

Not disclosed

Confidence

65%

Full breach record for San Gabriel Unified School District →

San Gabriel Unified School District notified parents of a data breach involving student information. The incident occurred via third-party vendor Illuminate Education, which experienced unauthorized access to databases between December 28, 2021, and January 8, 2022. Affected data included student names, academic records, behavior information, enrollment details, accommodation info, special education info, medical info, and demographics. Social Security numbers and financial data were not compromised. Illuminate Education secured applications, rotated credentials, and engaged forensic specialists. Identity monitoring services were offered to affected minors.

J jump to incidentP pin to compareR raw source

California clockDiscovered Jan 8, 2022 → Notified Jul 1, 2022174d ✗ CA 60-day late29 weeks discovery → filing

Incident timeline

undetected · 11 days

discovery → filing · 29 weeks / 202 days

Dec 28, 2021

Begins

Jan 8, 2022

Discovered

Jul 29, 2022

Filed

vs. sector median

+22 wks slower

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: San Gabriel Unified School District
norm: san gabriel unified school district

Name: San Gabriel Unified School District
norm: san gabriel unified school district
Industry: Educationllm

Discovered: Jan 8, 2022
Breach occurred: Dec 28, 2021 – Jan 8, 2022
Undetected for: 11 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jul 1, 2022
Affected individuals: Not disclosed
Data types: PIIIdentity (basic)EducationHealth (basic)Minor
Attack vector: Unknown
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Third party: via Illuminate Education

During the incident: Immediately took steps to secure the affected applications
Launched an investigation with external forensic specialists
Rotated credentials for the impacted applications
Conducted a review of policies and procedures
Implemented additional security measures
Offering 12 months of identity monitoring services through IDX
Changes made: Implemented additional security measures to protect the security of information in our possession
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 29 weeks(202 days from discovery to filing)
Compliance flags: CA 60-day late · 174d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: Jan 8, 2022
→ Notified: Jul 1, 2022
174d 60 days (analyst band, pre-2026 discoveries) CA 60-day late

Statute	Window	Elapsed	Threshold	Status
California	Discovered: Jan 8, 2022 → Notified: Jul 1, 2022	174d	60 days (analyst band, pre-2026 discoveries)	CA 60-day late

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-555775
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 29, 2022
Raw hash: f6345fe642e775cc52683c395ab3d7aa4cf327e2bc608c56d831524d56b7f3f2

Reporting entitySan Gabriel Unified School District

Victim entitySan Gabriel Unified School District

Incidentdiscovered Jan 8, 2022

Stated responseImmediately took steps to secure the affected applications

ComplianceCA 60-day late

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov