Cyber Incident Victim: Clayton Valley Charter High School
Date:
Aug 2015
Location:
United States of America
Summary
A hacker claiming affiliation with Anonymous compromised Clayton Valley Charter High School's computer systems, stealing and distributing staff emails to county education officials while alleging institutional corruption. The breach exposed internal communications, prompting school administrators to notify law enforcement after county officials alerted them about the unauthorized access to executive staff accounts.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 2 motives | 1 technique |
| Threat Actor | Type | Location |
|---|---|---|
| 1 actor | Available to members | Available to members |
Description
In August 2015, a hacker purportedly affiliated with the collective Anonymous targeted Clayton Valley Charter High School in California. The attacker compromised email accounts and accessed communications from at least one staff member, including Executive Director David Linzey. The hacker compiled stolen emails into attachments and sent them to Contra Costa County education officials during the week preceding August 17. The accompanying message accused the school of "corruption and manipulation," though specific allegations were not detailed in available reports. County authorities reviewed the submission and confirmed the breach to school administrators. Linzey contacted the Concord Police Department on Friday, August 14, after being notified his account was compromised. Law enforcement initiated an investigation but did not publicly disclose technical details regarding the intrusion method or full scope of accessed data.
The incident generated media attention when reported on August 17, though neither school nor law enforcement officials released further specifics about the compromised systems or operational impacts. No evidence emerged regarding public release of stolen data beyond the initial submission to county officials. The school acknowledged the security breach but did not disclose whether student or employee records were accessed. Police investigations remained ongoing at the time of reporting, with no subsequent public updates on attribution confirmation or disciplinary actions. The event highlighted vulnerabilities in the school's email systems while demonstrating hacktivist targeting of educational institutions over alleged governance concerns.