San Francisco State University

San Francisco State University notified California AG on Aug 20, 2013 of a data breach, which occurred on Mar 25, 2013. Data exposed: Social Security number, Driver's license / state ID, Financial / bank account, Medical / health information, Health insurance, Date of birth, Email address, Military ID, Phone number, Postal address, Name.

Case file (dates, days to notice against the statute, what the letter offers, prior incidents)

Organization: San Francisco State University
Source: California AG · source record
Date reported: Aug 20, 2013
Date(s) of breach: Monday, March 25, 2013
Residents affected: Not published by this source
Data exposed: Social Security number Driver's license / state ID Financial / bank account Medical / health information Health insurance Date of birth Email address Military ID Phone number Postal address Name
Notice letter: Sample notice (PDF)
Discovered: Jun 11, 2013, as stated in the letter
"For this reason, we are writing to inform you that on Monday, June 11, 2013 we were notified by federal law enforcement of a compromise of the College of Extended Learning server that occurred on March 25th, 2013 at 3 am."
Days to notice: 70 days from discovery (Jun 11, 2013) to the California record (Aug 20, 2013). Statute: 30 days from discovery or notification of the breach (Cal. Civ. Code § 1798.82). Over the statutory period
First seen by BreachTally: 2026-10-30 16:25 UTC

Dates and counts as filed by the organization with the agency. The breach window and the report date often differ by months.

Not today? Take the free Monday digest: the week's filings by state and the largest by people affected. Once a week.

Data reproduced from a public government filing. Spot an error? Email support@breachtally.com with the record link. Corrections are applied and noted.