A phishing scam stole the W-2 information for about 7,700 Manatee, Florida school district workers.

In January, a phishing email was sent to a payroll employee supposedly from the district superintendent Diana Green. The scam asked for all the employees W-2 forms for 2016 and the employee sent the information in a PDF to the scammer. The district did not know about the scam until February 3rd. when the district was informed of the breach by the IRS.

The district already had cybersecurity insurance, but also purchased identity theft and credit monitoring services for its workers. It had beefed up its security after the district had previously been cited for lax network security after audits conducted in 2011, 2014 and 2017.

All the security in the world will not stop an employee from being duped by a phishing scam.

Source: SCMagazine