Despite FBI Warning – Two Texas Employers Fall for W-2 Phishing Scam

With the US tax filing deadline just a little over a month away, tax-themed phishing season is also upon us.

Watch out for compromised email accounts or spoofed emails pretending to be from company executives requesting W-2 information.   These scam emails may also contain wire transfer request.

Two Texas Employers were compromised in Two Separate Phishing Scams

AUSTIN (KXAN) — The W-2s of workers of two Central Texas employers were compromised in two separate phishing scams. 

The Austin Diagnostic Clinic Association reported the 2017 W-2 and address information of employees were compromised on Feb. 27, thanks to an email attack. Patient information was not affected, according to Bob Presley, a compliance officer at ADCA.

“Based on the information we currently have, the only information that was compromised was that which is contained in a W-2 form and address information; there was no compromise of patient health information,” Presley said.

Separately, Rockdale Independent School District fell victim to a similar scam, in which all of its W-2s were also compromised.

Both groups reported the incidents to law enforcement and the IRS, and they are working with employees to get credit protection for those who were affected.

Last year, the IRS says more than 200 employers fell victim to the phishing scam, which translated into hundreds of thousands of employees who had their information compromised. The IRS says the Form W-2 scam has emerged as one of the most dangerous phishing emails in the tax community.

Read the FBI advisory including information on reporting phishing emails and data losses here:

Let us test your employees and see how many take the bait.  We will conduct a simulated phishing test to identify where your greatest security risks lie.


Who will take the bait?

Back to blog home page

Join our Newsletter

Get updates and the latest scoop in your inbox