HackingData ExfiltratedCustomer Data InvolvedEmployee Data InvolvedSupply Chain (3P Vendor)IDENTITY_BASICHEALTH_BASICEDUCATIONLowContained
San Gabriel Unified School District
bd_ec34f656c1817bcc · schema v1 · pii pii-v1
Full breach record for San Gabriel Unified School District →San Gabriel Unified School District, via third-party provider Illuminate Education, disclosed a data breach affecting student records. Unauthorized access occurred between Dec 28, 2021, and Jan 8, 2022, exposing names, academic, medical, and demographic data. No SSNs or financial data were compromised. Illuminate Education rotated credentials, engaged forensic investigators, and offered 12 months of identity monitoring.
California clockDiscovered Jan 8, 2022 → Notified Jul 1, 2022174d ✗ CA 60-day late29 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-555775
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 29, 2022
- Raw hash
- f6345fe642e775cc52683c395ab3d7aa4cf327e2bc608c56d831524d56b7f3f2
Reporting entity
- Name
- San Gabriel Unified School Districtnorm: san gabriel unified school district
Victim entity
- Name
- San Gabriel Unified School Districtnorm: san gabriel unified school district
Incident
- Discovered
- Jan 8, 2022
- Materiality determined
- —
- Notification sent
- Jul 1, 2022
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICHEALTH_BASICEDUCATION
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Third party
- via Illuminate Education
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 29 weeks(202 days from discovery to filing)
- Compliance flags
- CA 60-day late · 174d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Jan 8, 2022→ Notified: Jul 1, 2022174d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.