TechNadu reports:
A vendor that serves the Los Angeles Unified School District, Kokomo24/7, has notified authorities about a network file exposure on its internal systems and data storage environment.
Investigators determined that the suspicious activity discovered on December 11, 2024, allowed cybercriminals to access sensitive personal information. Since Kokomo24/7 is a vendor for the Los Angeles Unified School District (LAUSD), it is suspected that student and school staff data may have been stolen by cybercriminals.
Read more at TechNadu.
Caution: Because entities use variable fields in their notification templates, Kokomo24/7’s notification submitted to the California Attorney General’s Office on August 5 does not reveal the actual data types that were involved in the incident. Although TechNadu cites speculation about what is suspected, the reality is that any attacker may have gotten employee information but no student information, or vice versa — or no personal information at all.
The notification letter does not explain why it took them eight months since the discovery of the breach to send out notifications.