California State University East Bay disclosed a data breach affecting a web application used by the College of Education and Allied Studies. Unauthorized access occurred between March 27, 2017, and September 2, 2018, discovered on September 17, 2018. The attacker used an overseas IP address and a software tool to exfiltrate names, addresses, and Social Security numbers of applicants. The university offered 12 months of credit monitoring and mitigated vulnerabilities.