On May 30, 2014, Riverside Community College District (RCCD) suffered a data breach when an employee mistakenly sent an email containing sensitive student records to an incorrect external email address. The exposed data included personally identifiable information (PII) such as names, addresses, birth dates, student identification numbers, enrolled classes, and Social Security numbers (SSNs) of affected students. The breach was reported to the California Office of the Attorney General on June 13, 2014. The incident posed significant risks to the affected students, as SSNs and other PII could be exploited for identity theft, financial fraud, or other malicious activities. While the breach did not involve a targeted cyber attack, ransomware, or a systemic vulnerability, the mishandling of sensitive data resulted in the unauthorized disclosure of student information. The college district was required to notify impacted individuals and implement measures to mitigate potential harm, including credit monitoring and identity protection services. The breach highlighted the importance of proper data handling procedures and the need for robust safeguards to prevent accidental disclosures of sensitive information in educational institutions.