City College of San Francisco notified the California Attorney General of a data breach discovered on April 15, 2016. An employee responded to a phishing email, leading to unauthorized access to their email account. The compromised emails contained student information, including names, addresses, Social Security numbers, and financial aid application data. The college secured the account, reset passwords, and offered one year of identity protection services to affected individuals. Additional employee training and authentication enhancements were planned.