--- title: "Inner City Education Foundation network incident" description: "ICEF disclosed unauthorized access to its systems in 2024 and possible removal of information in an October 2026 notice." incident_type: "Cybersecurity incident" status: "active" last_modified: "2026-10-17" canonical_url: "https://www.ally.security/incidents/inner-city-education-foundation-network-incident-2024" markdown_url: "https://www.ally.security/incidents/inner-city-education-foundation-network-incident-2024.md" stix_url: "https://www.ally.security/incidents/inner-city-education-foundation-network-incident-2024/stix.json" --- # Inner City Education Foundation network incident An October 16, 2026 notice describes a network intrusion detected in September 2024. Last modified Oct 17, 2026 · 1 source ## Summary - **Environment:** ICEF network systems - **Operational impact:** Unauthorized access; service disruption not quantified - **Financial impact:** No financial loss quantified in the reviewed evidence ## What happened [Inner City Education Foundation](https://www.icefps.org/) reported that an intruder accessed certain systems from August 4 through September 29, 2024, and may have taken information. Its [notification letter](https://oag.ca.gov/system/files/Inner%20City%20Education%20Foundation%20-%20Notice%20of%20Data%20Event%20-%20CA_0.pdf) is dated October 16, 2026. [1](#source-1) ## Impact The notice describes potential information exposure. Its individualized data fields are blank in the public copy, and it gives no affected-person count. [1](#source-1) Confirmed theft, specific data categories and service disruption are not established by this source. ## Timeline ### August 4, 2024 — Access began Start of the reported access interval. [1](#source-1) ### September 29, 2024 — Reported access ended End of that interval. [1](#source-1) ### September 30, 2024 — Suspicious activity detected ICEF became aware of suspicious network activity. [1](#source-1) ### October 16, 2026 — Notice issued The [notification letter](https://oag.ca.gov/system/files/Inner%20City%20Education%20Foundation%20-%20Notice%20of%20Data%20Event%20-%20CA_0.pdf) was issued. [1](#source-1) ### October 17, 2026 — Briefing updated This briefing was last reviewed and updated on October 17, 2026. ## Threat Group & Attack Vector The reviewed notice does not establish an initial access method or malware family. ### Actors - No threat actor group has been identified in the reviewed public evidence. ### TTPs - No specific MITRE ATT\&CK technique is currently mapped for this case. ## Response ICEF engaged cybersecurity specialists, reviewed the affected information, strengthened safeguards and offered twelve months of credit monitoring. [1](#source-1) ## Assets [Download the case-scoped STIX 2.1 bundle]() ## Sources Primary source records used to research this incident. ### Inner City Education Foundation — Notice of Data Breach official · Inner City Education Foundation · Oct 16, 2026
Evidence ledger Review the supporting structured claims. 1. **Occurred At · 100% confidence · current** Suspicious activity detected: 2024-09-30 2. **Resulted In · 100% confidence · current** Inner City Education Foundation network incident: Reported access interval ended 3. **Disclosed At · 100% confidence · current** Inner City Education Foundation network incident: 2026-10-16 4. **Resulted In · 100% confidence · current** Reported access interval ended: End of the documented system-access interval. 5. **Resulted In · 100% confidence · current** Inner City Education Foundation network incident: At the time of the notice, ICEF said it had no indication of resulting identity theft or fraud. 6. **Resulted In · 100% confidence · current** Notification letter issued: ICEF issued its notification letter. 7. **Resulted In · 100% confidence · current** Inner City Education Foundation network incident: ICEF said it strengthened system security and was notifying potentially affected individuals. 8. **Affected Organization · 100% confidence · current** Inner City Education Foundation network incident: Inner City Education Foundation 9. **Resulted In · 100% confidence · current** Inner City Education Foundation network incident: The notice offers eligible recipients twelve months of credit monitoring through Cyberscout. 10. **Resulted In · 100% confidence · current** Inner City Education Foundation network incident: Suspicious activity detected 11. **Occurred At · 100% confidence · current** Notification letter issued: 2026-10-16 12. **Resulted In · 100% confidence · current** Inner City Education Foundation network incident: ICEF reported unauthorized access to certain systems between August 4 and September 29, 2024, with possible removal of information. 13. **Began At · 100% confidence · current** Inner City Education Foundation network incident: 2024-08-04 14. **Resulted In · 100% confidence · current** Unauthorized access began: Start of the documented system-access interval. 15. **Resulted In · 100% confidence · current** Inner City Education Foundation network incident: The organization investigated with external cybersecurity specialists and completed a detailed review to identify information and individuals involved. 16. **Occurred At · 100% confidence · current** Reported access interval ended: 2024-09-29 17. **Ended At · 100% confidence · current** Inner City Education Foundation network incident: 2024-09-29 18. **Resulted In · 100% confidence · current** Suspicious activity detected: ICEF became aware of suspicious activity. 19. **Occurred At · 100% confidence · current** Unauthorized access began: 2024-08-04 20. **Discovered At · 100% confidence · current** Inner City Education Foundation network incident: 2024-09-30 21. **Resulted In · 100% confidence · current** Inner City Education Foundation network incident: Unauthorized access began 22. **Resulted In · 100% confidence · current** Inner City Education Foundation network incident: Notification letter issued