ICEF Public Schools Data Breach

Hackers were inside the network of a Los Angeles charter school operator for nearly two months in 2024. The people whose information may have been taken are only now getting letters, more than two years later.

Inner City Education Foundation (ICEF) runs ICEF Public Schools, a network of charter schools in South Los Angeles and Inglewood. On October 16, 2026, ICEF began mailing letters about a data security incident. It also filed a sample letter with the California Attorney General.

How the ICEF Breach Happened

According to ICEF’s letter, the organization became aware of suspicious activity on its network on September 30, 2024. ICEF says it launched an investigation with outside cybersecurity specialists.

The investigation found that an unauthorized actor gained access to certain ICEF systems between August 4 and September 29, 2024. ICEF says the actor “may have taken certain information.” ICEF then reviewed the affected files to learn what information was involved and who it belonged to.

ICEF’s letter does not mention ransomware. Ransomware is malicious software that criminals use to lock or steal data and then demand payment. However, Ransomware.live, a site that tracks ransomware gang leak sites, lists Inner City Education Foundation as a victim of the Medusa ransomware group as of October 15, 2024. ICEF has not publicly confirmed that connection.

More Than Two Years Between Discovery and Notice

ICEF found the suspicious activity on September 30, 2024. Its letters are dated October 16, 2026. That is a gap of about 24 and a half months.

ICEF’s only explanation is that it “conducted a comprehensive and time-intensive review” to identify the information involved and the people it relates to. For more than two years, affected individuals had no notice that their information may have been taken, and no chance to watch for misuse.

ICEF has not disclosed how many people were affected. Its listing with the California Attorney General means at least 500 California residents were involved, because California requires an Attorney General filing when a breach affects more than 500 residents. ICEF Public Schools serves students, families and staff, but the letter does not say which groups were affected.

Sources: ICEF Notice of Data Event, filed with the California Attorney General (oag.ca.gov), letter dated October 16, 2026; Ransomware.live victim listing (October 15, 2024).

What Information Was Exposed?

ICEF has not publicly listed the types of information involved. In the sample letter filed with the California Attorney General, the sentence that names the affected information is left blank. Each recipient’s own letter should list the specific information ICEF found for that person.

What Is ICEF Offering Affected Individuals?

ICEF is offering 12 months of single-bureau credit monitoring, a credit report and a credit score through Cyberscout, a TransUnion company, at no cost. Key details from the letter:

• Enrollment must be completed within 90 days of the letter date. For letters dated October 16, 2026, that is about January 14, 2027.
• Enrollment is online at the Cyberscout address in the letter and requires the unique code printed in the letter, an internet connection and an email account.
• The letter says the service may not be available to people under 18.
• ICEF’s assistance line is 1-866-898-7699, Monday through Friday, 8:00 am to 8:00 pm Eastern, excluding major U.S. holidays.

Your Information Is at Risk

ICEF says it has no indication of identity theft or fraud tied to this event. Even so, information taken in a breach can be sold or used long after the attack. Because more than two years have already passed, any misuse could have started before people knew there was a risk.

School records can include information about children. Children’s personal information is a common target because misuse can go unnoticed for years, often until the child applies for a first loan, job or apartment.

Affected individuals can take these steps:

• Enroll in the free Cyberscout monitoring before the deadline in the letter.
• Pull free credit reports at www.annualcreditreport.com and look for accounts that are not yours.
• Consider a free credit freeze with Equifax, Experian and TransUnion, including for children.
• Watch bank and card statements and report anything unusual right away.
• Be careful with calls, texts or emails that mention ICEF or the breach.

Do You Have Legal Options?

Schools and the organizations that run them collect personal information from students, families and employees. They have a legal obligation to protect it and to notify people when it may have been exposed. When that obligation is not met, affected individuals may have legal rights and remedies. A Free Case Review can help them understand their options.

Contact the Data Breach Attorneys at Emery | Reddy today for a Free Case Review. 

Your Personally Identifiable Information (PII) includes information that can be used to identify you, such as your name and other personal details. Organizations that collect and store this information are expected to safeguard it. When PII is exposed in a data breach, it can potentially be used by cybercriminals to commit identity theft, financial fraud, or other misuse.

Frequently Asked Questions

How many people were affected by the ICEF data breach?

ICEF has not disclosed a total. Its filing with the California Attorney General means at least 500 California residents were affected.

What information was exposed?

ICEF has not made that public. The sample letter filed with the state leaves the data field blank. Check your own letter, which should list the information ICEF found for you.

Why did it take more than two years to notify people?

ICEF found the activity on September 30, 2024, and dated its letters October 16, 2026. ICEF says it needed a comprehensive and time-intensive review. It has not given any other reason for the delay.

What should I do if I received a letter?

• Enroll in the free Cyberscout monitoring within 90 days of your letter date.
• Check your credit reports at www.annualcreditreport.com.
• Consider a free credit freeze with all three credit bureaus.
• Keep your letter in a safe place.
• Request a Free Case Review from Emery | Reddy.

My child attends or attended an ICEF school. What should I watch for?

Children usually have no credit history, so a thief can open accounts in a child’s name without anyone noticing. You can ask each credit bureau whether your child has a credit report. If one exists and your child never applied for credit, that may be a sign of fraud. You can also request a free credit freeze for a child under 16.

How can I avoid scams that mention this breach?

Criminals often use news of a breach to send fake messages. Do not click links or share personal details with anyone who contacts you about the ICEF breach. Use only the phone number and website printed in your official letter.

Do I have a legal claim?

Organizations that hold your personal information have a duty to protect it and to tell you promptly when it may have been exposed. If you received a letter from ICEF, you may have legal rights. Contact Emery | Reddy at 916.995.5968 or visit emeryreddy.com for a Free Case Review to see what you may qualify for. No Fee Unless We Recover.