Da Vinci Schools notified the California AG of a data breach involving student information stored with third-party vendor Schoolzilla. A configuration error exposed backup files, which were accessed and deleted by a security researcher on April 4, 2017. Affected data included student names, IDs, grades, and test scores. No SSNs or financial data were involved. The vendor fixed the error and confirmed data deletion.