The cybersecurity firm Defense Point Security that holds several government contracts told its employees it was hit with a W-2 phishing scam resulting in the exposure of all the personally identifiable information.
The company, which was bought by Accenture last year, emailed its workers last week informing them that the W-2 data for anyone who was employed by Defense Point Security had been taken, according to KrebsonSecurity. The email said names, addresses, Social Security numbers, pay and all the other information normally included the form were compromised in the hack.
It was not stated when the attack took place nor how many employees were involved, Krebs wrote.
Dozens of companies, school districts and organizations have fallen victim to W-2 attacks this year, including Sunrun, American Senior Communities and Mitchell Gold + Bob Williams.
An SC Media inquiry to Accenture regarding the incident has not yet been answered.