MisuseData MishandlingEmployee Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
California Student Aid Commission
bd_8b02fd3484157a8e · schema v1 · pii pii-v1
Full breach record for California Student Aid Commission →On July 8, 2021, an employee of the California Student Aid Commission attempted to send unencrypted files containing student PII (name, DOB, SSN, address) from their state email to a personal account. The email provider blocked the transmission due to suspicious activity, preventing delivery. The agency notified affected students on July 15, 2021, and engaged law enforcement and implemented additional security controls.
California clockDiscovered Jul 8, 2021 → Notified Jul 15, 20217d ✓ CA 60-day OK8 days discovery → filing
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-542976
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 16, 2021
- Raw hash
- 9ce812e5ed2ff42e05b22349cf7b1ab00d618b0c51354fd38ae8d7c78d8bf92f
Reporting entity
- Name
- California Student Aid Commissionnorm: california student aid commission
- Domain
- csac.community.highbond.com
Victim entity
- Name
- California Student Aid Commissionnorm: california student aid commission
- Domain
- csac.community.highbond.com
Incident
- Discovered
- Jul 8, 2021
- Materiality determined
- —
- Notification sent
- Jul 15, 2021
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Insider
- Threat actor
- Internal
- Initial access
- insider_action
Compliance
- Time to disclose
- 8 days(8 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 7d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Jul 8, 2021→ Notified: Jul 15, 20217d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.