Solar panel maker Sunrun was hit with a spearphishing attack that got away with the company employee W-2 information.
A person impersonating Sunrun CEO Lynn Jurich emailed the company’s payroll department on January 20 requesting the tax documents. The employee turned over the records compromising the tax data, according to SFGate. The San Francisco-based company has about 3,400 employees, according to Bloomberg.
Sunrun did not say how many were affected by the breach.
In an email to employees Sunrun recommended they file their taxes as soon as possible, SFGate reported. This type of information has been used by cybercriminals to file false tax returns that have any refund sent to them instead of the actual tax payer.