An employee at the Academy of Art University in San Francisco accidentally exposed employee data after falling for an email scam. The employee shared the W-2 forms of its employees after receiving an email that appeared to come from a senior executive at the school. The breach exposed the data of about 3,000 school employees.