Total Registration LLC
bd_ecfc168dca65c877 · schema v1 · pii pii-v1
Full breach record for Total Registration LLC →Total Registration LLC, a third-party service provider for exam registration, experienced a data security incident due to a misconfigured Amazon S3 file storage server. The misconfiguration allowed potential unauthorized access to student registration information (names, dates of birth, addresses, phone numbers, student IDs) for students who registered for AP exams between June 2016 and April 2019. The issue was discovered on April 11, 2019, by a security researcher and remediated by April 12, 2019. No evidence of actual unauthorized access by third parties was found. Social Security numbers, credit card data, and medical information were not involved.
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-147669
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 30, 2019
- Raw hash
- ffe29e6c0e868643d9dd5d9b61531c5495c94fb9fa693d5f2e9ee4fa86c535e0
Reporting entity
- Name
- Saddleback Valley Unified School Districtnorm: saddleback valley unified school district
- Domain
- TotalRegistration.net
Victim entity
- Name
- Total Registration LLCnorm: total registration
- Domain
- totalregistration.net
Incident
- Discovered
- Apr 11, 2019
- Materiality determined
- —
- Notification sent
- May 10, 2019
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICEDUCATION
- Attack vector
- Misconfiguration
Compliance
- Time to disclose
- 7 weeks(49 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 29d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Apr 11, 2019→ Notified: May 10, 201929d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.