Academy of Art University (dba Stephens Institute) notified employees of a data breach on November 17, 2017. On November 8, 2017, an employee mistakenly sent an internal email containing an attachment with a spreadsheet tab listing employees' first names, last names, and Social Security numbers. The email was sent only to internal Academy employees. The university recalled the email, requested deletion of the file, and offered two years of complimentary Experian identity protection services.