Phishing Email Responsible for Exposes School District Employees Tax Information

2019, Breaches, February

Who: Centinela Valley Union High School District

# of Accounts Breached: Around 600+ employees

When it happened: January 31, 2019

What happened: Phishing Email from what appeared to be another employee

How it happened: On January 31, 2019, an employee received a phishing email designed to appear as if it came from one of our other employees. W-2 information for employees, including employee names, addresses, Social Security numbers, and 2018 wage information.

Outcome: Upon discovery, we immediately began an investigation to determine the scope of the incident and to verify what information may have been affected. We also notified the IRS, state tax boards, and federal law enforcement authorities, and we are cooperating with their ongoing investigation.