CHARLESTON– West Virginia Attorney General Patrick Morrisey alerted employers to an email phishing scam that has already targeted two entities in southern West Virginia.
Staff members, in both instances, reportedly received fraudulent emails from an address similar to that of their chief supervisor. The emails, typically sent to human resource and payroll divisions, request wage information and Form W-2s for all employees.
Any recipient who replies to the email and sends the information as requested, unknowingly turns over that data to the perpetrator, who then uses the Form W-2s to file false tax returns.
The Attorney General’s Consumer Protection Division learned Friday of the two data breaches in southern West Virginia. The impact has been limited to those employed by the entities, and both report having taken steps to notify those affected.