The University of California, San Diego Health recently disclosed a data breach occurred after some employee email addresses were compromised in a phishing attack. Four months or more had passed before the breach was discovered.