PITTSBURG, Kan. — Personal data belonging to employees of the city of Pittsburg was released to scammers in a phishing attack on Jan. 30, according to a statement from the city.
Employees received emails purportedly sent by city leaders asking for personal information contained on the W-2 tax form. Before the messages were recognized as fakes, the city released information belonging to current and former city employees who received a W-2 for the 2017.
“Phishing” refers to the act of requesting sensitive personal information under the guise of another person. The city’s technical network was not breached.
City officials say they contacted local police, the IRS and the FBI within 24 hours of the attack, then provided free identity theft protection services to affected employees.
There is no evidence that the personal information has been misused so far, according to the city’s statement.