Kokomo Solutions Inc., a telehealth vendor serving the Los Angeles Unified School District (LAUSD), suffered a network security breach on December 11, 2024, discovered via a forensic investigation. An unauthorized third party accessed files on its network, though the exact compromised data remains undisclosed. The company delayed notifying potential victims until August 5, 2025—nearly eight months later—raising concerns over compliance with state and federal breach notification laws. While no fraud or identity theft has been reported, the breach exposed vulnerabilities in Kokomo’s systems, prompting enhanced security measures and a one-year free membership to Experian IdentityWorks Credit 3B for affected individuals. The incident underscores risks to student and community privacy, particularly given Kokomo’s role in managing sensitive platforms like the LASAR anonymous reporting app, which handles mental health crises, drug-related tips, and school safety threats. The delay in disclosure and lack of transparency exacerbate reputational and legal risks for the vendor.