Incident BriefingsAlisal Union School District data incident

Alisal Union School District data incident

A district network incident led to a personal-data review and individual notices; the precise access date remains unresolved.

Last modified

Summary

  • Environment: School-district computer network
  • Operational impact: District says backups minimized disruption and supported restoration
  • Financial impact: No incident cost established in the reviewed evidence
  • Record status: Developing record. Reviewed October 13, 2026; updated as evidence emerges.

What happened

Alisal Union School District identified unusual activity around June 22, 2026. Its October 7 letter describes possible file access or downloading around June 19. [2]

Impact

The letter identifies names but leaves additional recipient-specific fields blank. It gives no affected-person total. [2]

Timeline

  1. General notice

    The district issued an initial community notice.

    [2]

  2. Data review completed

    Review of potentially affected information concluded.

    [2]

  3. Individual notice dated

    The retained consumer letter is dated October 7.

    [2]

  4. Briefing updated

    This briefing was last reviewed and updated on October 13, 2026.

Threat Group & Attack Vector

The reviewed evidence does not establish the initial access method. The California registry lists May 20 as the breach date, conflicting with the letter’s approximate June chronology. [1] [2]

Actors

  • No threat actor group has been identified in the reviewed public evidence.

TTPs

  • No specific MITRE ATT&CK technique is currently mapped for this case.

Response

Alisal said backups helped restore operations and minimize disruption. It offered 12 months of monitoring and identity-protection services. [2]