Workday CRM system data breach; No access to confidential information

Update | Monday, August 25, 2025

Information Technology reports that on Aug. 6, Workday detected a data breach involving its third-party customer relationship management system (CRM). Through a phishing campaign, a hacker group gained access to business contact details such as names, emails, and phone numbers. 

More information about the Workday breach can be found here. The college has notified the Columbus State employees affected by the breach. Read more.

There is no indication that confidential personally identifiable information (PII) or tenant data was accessed. Only general directory contact information was exposed. Workday responded swiftly to cut access and bolster security protocols. 

While this incident does not involve sensitive academic or financial data, it underscores the growing threat of social engineering attacks. Please remain vigilant: if you receive unexpected calls, texts, or emails—especially those requesting personal or account information—verify the sender before responding. 

Support and Assistance: 
If you have questions or need assistance, the IT Support Center can be reached at 614-287-5050, by email at helpdesk@cscc.edu, or by submitting a request at cscc.edu/ithelp. 

 

Go to 2025 Update Archive Go to Employee Update