Forest Global Training Partners

Cyber Risks · Krebs on Security

Seagate Phish Exposes All Employee W-2’s

Summary: On March 1, Seagate Technology learned that an employee had sent the 2015 W-2 tax form information for current and former U.S.-based employees to an unauthorized third party in response to a phishing email the employee believed was a legitimate internal company request. Seagate spokesman Eric DeRitis declined to give an exact count, saying only that it was "several thousand" but "less 10,000 by a good amount," and the company notified federal authorities and offered affected employees two years of Experian ProtectMyID credit monitoring.

What's compelling: Credit monitoring does not stop the actual threat here: W-2 forms carry Social Security numbers and salaries, everything needed to file a fraudulent return and claim a refund, and tax refund fraud drove a nearly 50 percent increase in consumer identity theft complaints last year, per FTC figures cited in the article.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related