Cyber Threat Actor: Shandra Gilles

Shandra Gilles, also known bythe alias Shandra Gilles, is a former employee of Coastal Preparatory Academy located in the United States of America. She held the position of School Operations Manager before her termination in June 2020. The individual is identified in legal documents and news reports as the person responsible for a data breach involving the charter school’s computer systems. No additional aliases or affiliations are mentioned in the available sources.

During her employment, Gilles allegedly obtained unauthorized access to sensitive personal data stored on the school’s networks, including Social Security numbers, health records, financial information, and employment details for students, parents, and staff. In June 2020 she reportedly locked system administrators out of critical computer functions by refusing to provide passwords, effectively making herself the sole administrator and disrupting the school’s ability to manage its data. The school’s leadership described this action as paralyzing operational access and noted that Gilles did not respond to requests to reactivate accounts or explain her conduct.

After being fired on June 27, 2020, Gilles continued to possess the extracted data in violation of a prior court agreement, prompting the school to seek an emergency injunction to compel the return of system control and to allow an independent forensic team to verify that she no longer retained the information. The school filed civil actions, contacted the Attorney General’s office, and asserted that Gilles had broken state and federal law. An internal investigation conducted using passwords she provided revealed two findings: first, that she had accessed the aforementioned categories of sensitive data, and second, that she had unlawfully retained that data following her dismissal. The school subsequently notified affected individuals that their personal information may have been compromised.

Coastal Preparatory Academy characterized the incident as an isolated event involving only Gilles and stated that it had taken swift action to prevent future exposures, including engaging legal counsel and retaining a computer forensic consultant. The school’s board chair emphasized that the response included immediate legal involvement and forensic analysis to address the breach. No further campaigns, malware families, tooling styles, or broader strategic objectives are described in the provided material. The profile is limited to the confirmed facts surrounding this specific incident.