Carmel Unified School District notified employees that a successful phishing attack had gained access to an employee’s email account that had a limited number of documents.
Compromised documents contained employees’ or dependents’ information such as Employee social security numbers, Spouses’ and dependents’ social security numbers, Employee/spouse marriage certificates, and Employee dependents’ birth certificates.
The district is unable to determine whether a specific piece of information in the account was accessed.
Source: https://www.databreaches.net/carmel-unified-school-district-notifies-employees-of-phishing-incident/
"id": "CAR977323",
"linkid": "carmel-unified-school-district",
"type": "Data Leak",
"date": "03/2019",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"