On July 8, 2021, an employee of the California Student Aid Commission attempted to send unencrypted files containing student PII (name, DOB, SSN, address) from their state email to a personal account. The email provider blocked the transmission due to suspicious activity, preventing delivery. The agency notified affected students on July 15, 2021, and engaged law enforcement and implemented additional security controls.