Almeida Law Group is investigating a data breach at The Nueva School. The breach occurred on June 13th, 2026. If you were affected, contact Almeida Law Group.
About The Nueva School
The Nueva School is a private pre-K through 12th grade independent school serving gifted learners. Founded in 1967, it operates two campuses: lower and middle schools in Hillsborough, California, and an upper school in San Mateo, California. The school serves approximately 853 to 966 students and is accredited by the Western Association of Schools and Colleges and the California Association of Independent Schools.
What Happened?
The Nueva School was listed in a California Attorney General sample breach notice filed on October 30th, 2026. According to the school’s own notice, suspicious activity was detected on June 21st, 2026 within a limited portion of its network. A forensic investigation determined that between June 13th, 2026 and June 22nd, 2026, certain files were accessed and copied without authorization. The school conducted a review of the affected files to identify the personal information they contained. The specific data types exposed were not disclosed in the notice—the relevant section contains an unfilled template placeholder. The total number of individuals affected was also not specified. As a precaution, The Nueva School is offering complimentary identity monitoring services through Kroll, though the duration and enrollment deadline were not filled in within the notice text. Approximately four and a half months elapsed between the discovery of the breach and consumer notification.
Multiple threat intelligence platforms, including DeXpose and SOCRadar, report that the Qilin ransomware group claimed responsibility for the attack on its dark web leak site on July 18th, 2026. That claim is an attacker allegation tracked by third-party threat intelligence sources; The Nueva School’s own notice does not mention ransomware or identify any threat actor. As of November 2nd, 2026, the law firm Shamis & Gentile P.A. announced it is investigating the incident for a potential class action lawsuit, though no lawsuit has been filed.
Key Facts at a Glance
- Company or Organization: The Nueva School
- Industry: Education (Private K-12 Independent School)
- Location: Hillsborough and San Mateo, California
- Incident type: Unauthorized access and copying of files
- Date of breach: June 13th, 2026
- Date breach discovered: June 21st, 2026
- Date of consumer notification: October 30th, 2026
- Identity theft protection offered: Yes, through Kroll (complimentary identity monitoring including credit monitoring, fraud consultation, and identity theft restoration)
- Litigation status: Shamis & Gentile P.A. announced a class action investigation on November 2nd, 2026; no lawsuit filed as of that date
- Source: California Attorney General filing; DeXpose; SOCRadar; ClaimDepot
What Should You Do?
If you received a notice from The Nueva School, enroll in the complimentary Kroll identity monitoring services as soon as possible by visiting enroll.krollmonitoring.com using the membership number provided in your letter. You should also place a fraud alert or credit freeze with the three major credit bureaus—Equifax, Experian, and TransUnion—to help prevent unauthorized new accounts from being opened in your name. Review your account statements regularly for unfamiliar charges or activity, and request your free credit reports at AnnualCreditReport.com. If you suspect your information has already been misused, visit IdentityTheft.gov for step-by-step guidance on reporting and recovery.
Your Legal Rights
If your personal information was involved in this breach, you may have legal rights depending on the facts of the incident and the law in your state. Almeida Law Group represents consumers in data breach and privacy litigation and can help you evaluate whether you may have a claim. Contact us at (708) 529-5418 or through our contact page for a free case evaluation.
