W-2 phishing schemes are growing in popularity. The scam type has struck another victim: Bolivar, Mo.-based Citizens Memorial Hospital, reports the Bolivar Herald-Free Press.
On Feb. 8, a CMH employee received a phony phishing email that requested internal information. Believing it was real, the employee sent 2016 W-2 tax form information for current and former employees to the third party. The information included Social Security numbers, but did not include dates of birth, bank deposit amounts or direct deposit details.
After learning of the situation on Feb. 9, CMH immediately informed the FBI, the Internal Revenue Service and Missouri taxing authorities.
Additionally, the hospital notified affected employees via email and mail. It is also providing impacted individuals with credit protection services.
"We deeply regret this incident, and we offer our sincerest apologies to everyone affected," said CMH Director of Marketing Tamera Heitz-Peek, according to the report.