By: Ayla Ozturk

Visalia Unified School District [VUSD] provided notice of a data breach on December 30, 2021. 

VUSD’s press release stated that around June 6th, 2021, the district pinpointed that several VUSD email accounts were accessed unauthorized between the first of January and the sixth of June 2021.  

The notice reports,  

“Information identified in the reviewed email accounts consisted primarily of name and medical information. However, one or more of the following types of information for approximately ten (10) individuals were also identified: driver’s license number, financial account number, and health insurance information.” 

Interim Superintendent Doug Cardoza was able to provide an update to the Gigantea. The following information was attained directly from Mr. Cardoza. 

After conducting an extensive review of the situation, VUSD did not find any misuse of said information. With an intent of caution, they provided notice to affected individuals so they could take steps to secure their accounts. 

The district dealt with a ransomware attack on May 28th, 2021. Local and federal law enforcement were called to tackle the incident. Taking prompt action, VUSD was able to fight off the ransomware before it took full effect. 

Shutting down systems district-wide, the ransomware attack thankfully failed.  

Two days after on May 20th, 2021, the VUSD Board reported the ratification of a contract with Mullen Coughlin LLC, a cybersecurity and data privacy law firm.  

The firm is retained and covered through the district’s cyber-security insurance policy. 

With the assistance of counsel, VUSD conducted another exhaustive investigation to ensure all systems were secure, could be rebooted, and to find the origin of the attack.  

This was a privileged investigation, as it involved very personal information. In this analysis, VUSD discovered unauthorized access to VUSD email accounts. This did not affect student databases. 

Cardoza reports, “The extent of the event and the information potentially affected was relatively limited.” 

To act in accordance with its legal obligations to notify any potentially impacted individuals, VUSD meticulously reviewed impacted accounts. This was accomplished on or around December 3, 2021.  

The district has notified those whose personal information was identified during the review. They were provided with instructions on how to follow up with additional inquiries through a committed support line and email address. 

Update to follow.

If you have further questions, you may contact VUSD by:

VUSD’s dedicated assistance line: 1-833-365-2601 (Available Monday through Friday, from 6:00 a.m. to 6:00 p.m. Pacific Standard Time; excludes U.S. holidays)

Write to: Visalia Unified School District at Attn: Human Resources Development Compliance Officer, 5000 W. Cypress Ave., Visalia, CA 93277

Email: compliance@vusd.org

The original notice included information on how to thoroughly secure information online. The following information was attained directly from said notice.

  • Under U.S. law, a consumer is entitled to one free credit report annually from each of the three major credit reporting bureaus, Equifax, Experian, and TransUnion. To order a free credit report, visit www.annualcreditreport.com or call, toll-free, 1-877-322-8228. Individuals may also directly contact the three major credit reporting bureaus listed below to request a free copy of their credit report.
  • Consumers have the right to place an initial or extended “fraud alert” on a credit file at no cost. An initial fraud alert is a 1-year alert that is placed on a consumer’s credit file. Upon seeing a fraud alert display on a consumer’s credit file, a business is required to take steps to verify the consumer’s identity before extending new credit. If an individual is a victim of identity theft, the individual is entitled to an extended fraud alert, which is a fraud alert lasting seven years. Should an individual wish to place a fraud alert, the individual may contact any one of the three major credit reporting bureaus listed below.
  • As an alternative to a fraud alert, consumers have the right to place a “credit freeze” on a credit report, which will prohibit a credit bureau from releasing information in the credit report without the consumer’s express authorization. The credit freeze is designed to prevent credit, loans, and services from being approved in an individual’s name without the individual’s consent. However, individuals should be awarethat using a credit freeze to take control over who gets access to the personal and financial information in their credit report may delay, interfere with, or prohibit the timely approval of any subsequent request or application individuals make regarding a new loan, credit, mortgage, or any other account involving the extension of credit. Pursuant to federal law, individuals cannot be charged to place or lift a credit freeze on their credit report. To request a security freeze, individuals may need to provide some or all of the following information:
    • Full name (including middle initial as well as Jr., Sr., II, III, etc.);
    • Social Security number;
    • Date of birth;
    • Addresses for the prior two to five years;
    • Proof of current address, such as a current utility bill or telephone bill;
    • A legible photocopy of a government-issued identification card (state driver’s license or ID card,
      etc.); and
    • A copy of either the police report, investigative report, or complaint to a law enforcement agency
      concerning identity theft if an individual is a victim of identity theft.
      Should an individual wish to place a credit freeze, the individual may contact the three major credit
      reporting bureaus listed below:
Equifax Experian TransUnion
https://www.equifax.com/personal/creditreport-services/https://www.experian.com/help/https://www.transunion.com/credithelp
888-298-00451-888-397-3742833-395-6938
Equifax Fraud Alert, P.O. Box 105069
Atlanta, GA 30348-5069		Experian Fraud Alert, P.O. Box
9554, Allen, TX 75013		TransUnion Fraud Alert, P.O. Box
2000, Chester, PA 19016
Equifax Credit Freeze, P.O. Box 105788
Atlanta, GA 30348-5788		Experian Credit Freeze, P.O.
Box 9554, Allen, TX 75013		TransUnion Credit Freeze, P.O.
Box 160, Woodlyn, PA 19094
  • Individuals may further educate themselves regarding identity theft, fraud alerts, credit freezes, and the steps they can take to protect their personal information by contacting the consumer reporting bureaus, the Federal Trade Commission, or their state Attorney General. The Federal Trade Commission may be reached at: 600 Pennsylvania Avenue NW, Washington, DC 20580; www.identitytheft.gov; 1-877-ID-THEFT (1-877-438-4338); and TTY: 1-866-653-4261. The Federal Trade Commission also encourages those who discover that their information has been misused to file a complaint with them. Individuals can obtain further information on how to file such a complaint by way of the contact information listed above. Individuals have the right to file a police report if they ever experience identity theft or fraud. Please note that in order to file a report with law enforcement for identity theft, individuals will likely need to provide some proof that they have been a victim. Instances of known or suspected identity theft should also be reported to law enforcement and the applicable state Attorney General. This notice has not been delayed by law enforcement.

Minors:

Typically, credit reporting agencies do not have a credit report in a minor’s name. To find out if your minor
has a credit report or to request a manual search for your minor’s Social Security number each credit bureau
has its own process. To learn more about these processes or request these services, individuals may contact
the credit bureaus by phone or in writing or they may visit the below websites:

https://www.equifax.com/personal/education/identity-theft/child-identity-theft/

www.experian.com/fraud/form-minorchild.html

http://www.transunion.com/credit-disputes/child-identity-theft-inquiry-form

  • To request information about the existence of a credit file in your minor’s name, search for you minor’s Social Security number, place a security freeze on your minor’s credit file, place a fraud alert on your minor’s credit report (if one exists), or request a copy of your minor’s credit report an individual may be required to provide some or all of the following information:
    • A copy of the individual’s driver’s license or another government issued identification card, such as a state identification card, etc.;
    • Proof of address, such as a copy of a bank statement, utility bill, insurance statement, etc.;
    • A copy of your minor’s birth certificate;
    • A copy of your minor’s Social Security card;
    • Your minor’s full name, including middle initial and generation, such as JR, SR, II, III, etc.;
    • Your minor’s date of birth;
    • Your minor’s previous addresses for the past two years.

Additional Information

Individuals may further educate themselves regarding identity theft, fraud alerts, credit freezes, and the
steps individuals can take to protect personal information by contacting the consumer reporting bureaus,
the Federal Trade Commission, or their state Attorney General. The Federal Trade Commission may be
reached at: 600 Pennsylvania Avenue NW, Washington, DC 20580; www.identitytheft.gov; 1-877-IDTHEFT (1-877-438-4338); and TTY: 1-866-653-4261.

The Federal Trade Commission also encourages those who discover that their information has been misused to file a complaint with them. Individuals can obtain further information on how to file such a complaint by way of the contact information listed above.

Individuals and/or their minor have the right to file a police report if the minor ever experiences identity theft or fraud.

Please note that in order to file a report with law enforcement for identity theft, you or your minor will likely need to provide some proof that your minor has been a victim.

Instances of known or suspected identity theft should also be reported to law enforcement and your state Attorney General. This notice [VUSD] has not been delayed by law enforcement.

Ayla Ozturk
+ posts

Ayla Ozturk, class of 2024, is a fourth-year journalism student passionate about leading the News section. She is dedicated to informing students and amplifying their voices through Government and Politics writing.

You can reach her at ayla.oz3769@vusd.us.

 

Tags: , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , ,