An employee payroll manager responded to a phishing email requesting employee information.
How many victims? 4,000 employees
What type of information? Names, wages, tax information, and other personal information present on W-2 tax forms.
What happened? An unknown individual posing as the company's CEO Scott Wise, sent a phishing email to a payroll account employee requesting the information of all 4,000 employee's W-2 forms in PDF format. The employee did as instructed.
What was the response? On Monday, Jan. 30, the company's director of human resources contacted the Indiana Metropolitan Police Department after learning of the incident. The firm said it has since taken precautionary measures to prevent the incident from reoccurring and to protect employee personal and financial data. One year of free credit monitoring services is being offered to those affected and toll free number was provided to anyone who may have questions.
Quote: “Unfortunately, Scotty's was the target of and fell victim to scammers, as so many other companies have,” Wise said in the statement. “Scotty's employees and customers are of tremendous importance to the company and Scotty's regrets any inconvenience to its employees that may result from this scamming incident. Scotty's will continue to work with federal and local law enforcement, the Internal Revenue Service and credit bureaus to bring the responsible party or parties to justice.”