Los Angeles Unified Investigating Dark Web Claims of Student and Teacher Data Breach
Los Angeles Unified School District is currently investigating claims that a user on the dark web is offering purported identifiable data about students and teachers, potentially obtained in a 2022 cyberattack. The dark web listing, posted on Thursday afternoon, contained sensitive information on hundreds of individuals born between 1993 and 2010.
The sample data set released by the seller included various personal details such as home address, homelessness status, disability status, and contact information for relatives. While the district has not confirmed whether the data correspond to actual students, they are taking the situation seriously.
The information was being offered for $1,000 on a hacker forum and totaled around 11 GB of purported data in a handful of files. The post claimed that approximately 24 million records were available for purchase.
Following a cyberattack by the Vice Society ransomware group in September 2022, some individuals had their personal information released on the dark web. It is unclear whether the data uploaded on Thursday is connected to that incident, but experts believe there may be a link.
Cybersecurity experts warn that the exposed personally identifiable information could be used in future phishing attacks. LAUSD is working with law enforcement to investigate the claims and ensure the privacy of students, families, and employees is protected.
As the investigation unfolds, the district is taking steps to address the potential security breach and prevent any further unauthorized access to sensitive information.
