HackingVulnerability ExploitSupply Chain (3P Vendor)Customer Data InvolvedEmployee Data InvolvedIDENTITY_BASICCREDENTIALSMediumResolved
Adelanto Elementary School District
bd_f966d079a76be9a8 · schema v1 · pii pii-v1
Full breach record for Adelanto Elementary School District →Adelanto Elementary School District notified parents of a data breach involving the Aeries Student Information System. An unauthorized individual exploited a vulnerability in the Aeries software in late November 2019, gaining access to student and parent information including names, addresses, phone numbers, email addresses, and hashed passwords. Aeries notified districts in April 2020. The district required password changes and installed security patches.
California clockDiscovered Nov 1, 2019 → Notified Jun 26, 2020238d ✗ CA 60-day late34 weeks discovery → filing
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed7,559 affectedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-191465
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 26, 2020
- Raw hash
- 44a7cb9cf038450824db87d006866cc8f6b93a5233c0b4954dc271686c284617
Reporting entity
- Name
- Adelanto Elementary School Districtnorm: adelanto elementary school district
- Domain
- aesd.net
Victim entity
- Name
- Adelanto Elementary School Districtnorm: adelanto elementary school district
- Domain
- aesd.net
Incident
- Discovered
- Nov 1, 2019
- Materiality determined
- —
- Notification sent
- Jun 26, 2020
- Affected individuals
- 7,559
- Data types
- IDENTITY_BASICCREDENTIALS
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1195 Supply Chain Compromise
- Threat actor
- External
- Third party
- via Aeries Software
- Initial access
- supply_chain
Compliance
- Time to disclose
- 34 weeks(238 days from discovery to filing)
- Compliance flags
- CA 60-day late · 238d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Nov 1, 2019→ Notified: Jun 26, 2020238d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.