The breach happened in June but Aflac said it confirmed that personal data was likely included in early December.
A pilot program was launched last year to attract more students to the CSU system, steering some to campuses that have been struggling with enrollment declines.