McCarthy Lebit has learned of a new phishing scam targeting businesses. Here is how it works: an email is sent to HR or payroll that appears to be from the CEO or another high ranking employee. The email requests a return email with copies of all W-2’s for all employees. If the bait is taken and the information is provided, the internet scammer gains access to the names, social security numbers, addresses, and income data for all employees… everything that is needed for identity theft.
The scammers are targeting companies big and small, and even sophisticated technology companies like Snapchat and Polycom have fallen prey to the scam.
To learn more about this scam, please see this news release from the Ohio Department of Taxation or this article. In the meantime, employees who have access to personal data should be cautioned about this scam, and be reminded that any email request for personal information should be personally verified.