Carmel Unified School District experienced a phishing incident around January 5, 2019, in which an outside individual sent phishing emails to employees, resulting in unauthorized access to employee email accounts. Affected data included employee and dependent SSNs, marriage certificates, birth certificates, and medical notes. The District reset passwords, removed phishing messages, enhanced mail filtering, and offered one year of Experian IdentityWorks identity protection to affected individuals.