Breach, Compliance Management, Threat Management, Data Security, Privacy

4K W-2 compromised in Scotty’s Brewhouse phishing attack

An employee payroll manager responded to a phishing email requesting employee information.

How many victims? 4,000 employees

What type of information? Names, wages, tax information, and other personal information present on W-2 tax forms.

What happened?  An unknown individual posing as the company's CEO Scott Wise, sent a phishing email to a payroll account employee requesting the information of all 4,000 employee's W-2 forms in PDF format. The employee did as instructed.

What was the response?  On Monday, Jan. 30, the company's director of human resources contacted the Indiana Metropolitan Police Department after learning of the incident.  The firm said it has since taken precautionary measures to prevent the incident from reoccurring and to protect employee personal and financial data. One year of free credit monitoring services is being offered to those affected and toll free number was provided to anyone who may have questions.

Quote: “Unfortunately, Scotty's was the target of and fell victim to scammers, as so many other companies have,” Wise said in the statement. “Scotty's employees and customers are of tremendous importance to the company and Scotty's regrets any inconvenience to its employees that may result from this scamming incident. Scotty's will continue to work with federal and local law enforcement, the Internal Revenue Service and credit bureaus to bring the responsible party or parties to justice.”

Source:  Fox 59 News, The Indianapolis Star

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news

By clicking the Subscribe button below, you agree to SC Media Terms and Conditions and Privacy Policy.