California Student Aid Commission

The California Office of the Attorney General reported a data breach involving the California Student Aid Commission on July 16, 2021. The breach occurred on July 8, 2021, when an employee attempted to send an email containing unencrypted personally identifiable information (PII) to their personal email account, but the files were blocked and not delivered. The affected information includes first and last name, date of birth, Social Security number, and mailing address.

Source: https://oag.ca.gov/ecrime/databreach/reports/sb24-542976

TPRM report: https://www.rankiteo.com/company/california-student-aid-commission

"id": "cal159072525",
"linkid": "california-student-aid-commission",
"type": "Breach",
"date": "7/2021",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'industry': 'Education',
                        'location': 'California',
                        'name': 'California Student Aid Commission',
                        'type': 'Government Agency'}],
 'attack_vector': 'Email',
 'data_breach': {'data_encryption': 'No',
                 'personally_identifiable_information': ['first and last name',
                                                         'date of birth',
                                                         'Social Security '
                                                         'number',
                                                         'mailing address'],
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['PII']},
 'date_detected': '2021-07-08',
 'date_publicly_disclosed': '2021-07-16',
 'description': 'An employee attempted to send an email containing unencrypted '
                'personally identifiable information (PII) to their personal '
                'email account, but the files were blocked and not delivered.',
 'impact': {'data_compromised': ['first and last name',
                                 'date of birth',
                                 'Social Security number',
                                 'mailing address']},
 'references': [{'date_accessed': '2021-07-16',
                 'source': 'California Office of the Attorney General'}],
 'title': 'California Student Aid Commission Data Breach',
 'type': 'Data Breach',
 'vulnerability_exploited': 'Human Error'}