Phishing emails to employees at several school districts in Monterey County, California, have exposed Social Security numbers and medical records.