The offices of the San Diego Unified School District experienced a computer-network security breach. However, it is not clear if the breach resulted in the misappropriation of any sensitive data or involved any ransom demands. Out of an abundance of caution, the SDUSD reset all passwords for staff and continued the process to change passwords for student accounts as a measure to continue strengthening our IT system. After learning of the incident, SDUSD swiftly took steps to secure our network and launched an investigation to prevent any disruptions to (information technology) operations.

San Diego Unified School District (SDUSD) suffered a ransomware attack discovered around October 25, 2022, compromising the personal and health information of students and employees. The breach exposed sensitive data, leading to a class action lawsuit alleging negligence in cybersecurity protections. Affected individuals—including California residents, employees, and students (or their guardians for minors)—were notified of potential risks such as identity theft and fraud. The settlement offers victims up to $2,500 in compensation (covering out-of-pocket losses, lost time, and extraordinary expenses) alongside one year of free credit monitoring. The attack’s fallout included financial burdens for victims, reputational damage to SDUSD, and operational disruptions, though no evidence suggests the stolen data was misused for large-scale fraud or systemic harm. The district denied liability but settled to avoid prolonged litigation, with payouts contingent on court approval.