AI Threat Watch

Case lausd-allhere-ed-chatbot-dataModel & data leakUnited States

Whistleblower says LAUSD's $6M 'Ed' AI chatbot sent student data offshore before vendor AllHere collapsed

A former AllHere engineering director alleged the 'Ed' chatbot built for Los Angeles Unified put students' personal data in every AI prompt, shared it with third parties and processed most requests on overseas servers. LAUSD shut the chatbot down after AllHere furloughed most staff in June 2024 and said student data remained protected.

MediumHarm caused by AIStatus: ContainedVerified case file

Open in the interactive mapCite this case

Reported
Jul 1, 2024
Location
United States
Target
Students of Los Angeles Unified School District
Severity
Medium
Verification
Reported by credible press or researchers
Triggered by
AllHere Education (vendor)
Actor type
AI product design / safeguards
Sector
Education & research
Reported loss
None reported
CVE
None

What happened

A former AllHere engineering director alleged the 'Ed' chatbot built for Los Angeles Unified put students' personal data in every AI prompt, shared it with third parties and processed most requests on overseas servers. LAUSD shut the chatbot down after AllHere furloughed most staff in June 2024 and said student data remained protected.

Impact: Chatbot shut down months after launch; about half of a roughly $6 million contract paid; student data exposure risk

Who triggered it

Actor: AllHere Education (vendor)

Attribution: Whistleblower allegations reported by The 74; not confirmed by LAUSD

Motive: None (alleged poor data handling)

How it happened

Attack vector: Third-party AI chatbot integrated with district student records

Root cause: Alleged lack of data minimisation in prompts and offshore processing; vendor financial collapse

Timeline

  1. LAUSD launches 'Ed' chatbot (month only)
  2. AllHere says most employees furloughed; chatbot switched off
  3. The 74 publishes whistleblower's data-handling allegations

Response

LAUSD dropped AllHere and said Ed data stays district-owned and protected; inspector general interviewed the whistleblower

Current status: Contained

Research warnings this case matches

Compared with published AI risk research from several institutes on the Research vs reality page.

Sources (open in a new tab)

Cite this case

Whistleblower says LAUSD's $6M 'Ed' AI chatbot sent student data offshore before vendor AllHere collapsed. AI Threat Watch, case lausd-allhere-ed-chatbot-data, Jul 1, 2024. https://aithreat.io/cases/lausd-allhere-ed-chatbot-data/

Permanent link: https://aithreat.io/cases/lausd-allhere-ed-chatbot-data/

Related cases

The same type of incident, most recent first.

This case file in other languages: EnglishFrançaisEspañolالعربية中文Русский