"Los Angeles Unified School District Investigates Data Theft Claims"

Los Angeles Unified School District (LAUSD) officials announced they are investigating a threat actor's claims that they're selling stolen databases containing records belonging to millions of students and thousands of teachers.  LAUSD is the second largest public school district in the United States, with over 25,900 teachers, roughly 48,700 other employees, and more than 563,000 students enrolled during the 2023-2024 school year.  The group claiming to have stolen data is the Vice Society ransomware group.  Vice Society is selling the allegedly stolen data for $1,000.  The CSV files for sale on a hacking forum contain over 11GB of data, including over 26 million records with student information, more than 24,000 teacher records, and around 500 staff information.  The ransomware group shared two data samples containing roughly 1,000 student records with Social Security Numbers (SSNs), addresses, parent addresses, email addresses, contact information, and dates of birth as proof that the information was legitimate.  Researchers who analyzed these samples said the data for sale appears legitimate but could be old, as the dataset does not include recent dates.  However, the threat actor only shared a small sample of the allegedly stolen data, so there may be new information that has yet to be shared.

BleepingComputer reports: "Los Angeles Unified School District Investigates Data Theft Claims"