Application security

Sunrun hit with spearphishing attack, W-2 forms compromised

Solar panel maker Sunrun was hit with a spearphishing attack that got away with the company employee W-2 information.

A person impersonating Sunrun CEO Lynn Jurich emailed the company's payroll department on January 20 requesting the tax documents. The employee turned over the records compromising the tax data, according to SFGate. The San Francisco-based company has about 3,400 employees, according to Bloomberg.

Sunrun did not say how many were affected by the breach.

In an email to employees Sunrun recommended they file their taxes as soon as possible, SFGate reported. This type of information has been used by cybercriminals to file false tax returns that have any refund sent to them instead of the actual tax payer. 

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news

By clicking the Subscribe button below, you agree to SC Media Terms and Conditions and Privacy Policy.