The California Office of the Attorney General disclosed a data breach affecting SharesPost, Inc. in December 2019. Between September 6 and September 18, 2019, an unauthorized party gained access to an employee’s email account, potentially exposing sensitive personal information. The compromised data included names, addresses, dates of birth, Social Security numbers, and bank account details. While there was no direct evidence confirming the data was accessed or misused, the exposure posed significant risks, including identity theft, financial fraud, and reputational harm. The breach stemmed from a likely phishing or credential compromise attack, highlighting vulnerabilities in email security protocols. Given the nature of the exposed data—particularly financial and personally identifiable information (PII)—the incident raised concerns over compliance with data protection regulations and the company’s ability to safeguard customer and employee information.