LAUSD Los Angeles Unified School District 2022 Data Breach

Threat actors successfully compromised internal Active Directory domains and exfiltrated approximately 500 GB of structured and unstructured records from the district's centralized Student Information System (MiSiS) and HR directories. Following LAUSD's refusal to pay the demanded ransom, the data was published on the dark web in October 2022 and subsequently indexed across breach repositories. The exposed data tables (including STUDENT.csv, STAFF.csv, and demographic masters) encompass over 2 million records covering students, educators, and contractors. Compromised information includes full names, dates of birth, Social security numbers (SSNs), residential addresses, parent/guardian contacts, graduation records, employee payroll metadata, and confidential psychological/special education health evaluations.

The exposure of sensitive developmental assessments, behavioral reports, and identity records of minors ranks this incident among the most ethically severe and damaging cyberattacks against the public education sector in U.S. history.

Current and former students, parents, and employees are urged to place immediate credit freezes with major credit bureaus (Equifax, Experian, TransUnion) and monitor for fraudulent tax filings or synthetic identity misuse.