HackingVulnerability ExploitSupply Chain (3P Vendor)Customer Data InvolvedEmployee Data InvolvedIDENTITY_BASICCREDENTIALSLowResolved
Kingsburg Elementary Charter
bd_faa22a41a5be53fa · schema v1 · pii pii-v1
Full breach record for Kingsburg Elementary Charter →Kingsburg Elementary Charter School District experienced unauthorized access to its Student Information System (Aeries SIS) in November 2019 due to a software vulnerability. The breach was discovered on May 12, 2020, after notification from the software vendor. Affected data included student and parent names, addresses, emails, and passwords. No financial or SSN data was compromised. The district mandated password resets and worked with law enforcement, who have since taken perpetrators into custody.
California clockDiscovered May 12, 2020 → Notified May 14, 20202d ✓ CA 60-day OK7 days discovery → filing
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-190160
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 19, 2020
- Raw hash
- 16658d9f252b994403d652dc1bb49898ad49e38ddb3e9511ddb8e30315a5c965
Reporting entity
- Name
- Kingsburg Elementary Charternorm: kingsburg elementary charter
- Domain
- kesd.org
Victim entity
- Name
- Kingsburg Elementary Charternorm: kingsburg elementary charter
- Domain
- kesd.org
Incident
- Discovered
- May 12, 2020
- Materiality determined
- —
- Notification sent
- May 14, 2020
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICCREDENTIALS
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Regulator citations
- Notified California Attorney General
- Third party
- via Aeries Software
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 7 days(7 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 2d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: May 12, 2020→ Notified: May 14, 20202d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.