A Digital Defense Against W-2 Theft

A Digital Defense Against W-2 Theft

The FBI gives basic steps to mitigate the threat of W-2 theft.

It is "prime time," about a month before April's tax filing deadline, for cybercriminals and scam artists looking to cash in on your personal tax information. The FBI has recently issued an updated warning for businesses and employees to be on the watch for W-2 theft.

If a cybercriminal gets ahold of your W-2, he or she has the ability to file your tax return, and get your refund, before you do. There is also a great deal of personally identifiable information, including your Social Security Number, that could lead to numerous other problems for a victim.

The FBI says the most common way a scam artist could get your W-2 information is through a phishing scheme. The hacker, pretending to be an executive at the company, sends an email to the HR department and asks for employee's personal information or their W-2's, perhaps for tax or audit purposes. In some cases, hackers have been able to cause a massive data dump affecting thousands of employees.

So, how can you strengthen your company to ensure this doesn't happen and the data of your employees is protected? The FBI's Internet Crime Complaint Center has put together some basic steps that businesses can take to mitigate the threat:

  • Limit the number of people who have access to employees' person information and W-2's.
  • Set up two-factor verification system to confirm the request and receipt of such sensitive information.
  • Establish protocols for sensitive information requests ahead of time and outside the email environment.
  • Ensure that you secure sensitive PII and W-2 information with encryption.
  • Establish and maintain robust and strong security for your data, including firewalls, virus protection and spam filters.

"Businesses that have suffered a data breach involving tax information should immediately report that breach to the IRS and your state tax agency," the FBI said. "The IRS also wants to hear from you if you received a W-2 phishing e-mail but did not fall victim to the scam."

About the Author

Sydny Shepard is the Executive Editor of Campus Security & Life Safety.

Featured

  • The Future is Happening Outside the Cloud

    For years, the cloud has captivated the physical security industry. And for good reason. Remote access, elastic scalability and simplified maintenance reshaped how we think about deploying and managing systems. But as the number of cameras grows and resolutions push from HD to 4K and beyond, the cloud’s limits are becoming unavoidable. Bandwidth bottlenecks. Latency lags. Rising storage costs. These are not abstract concerns. Read Now

  • The Impact of Convergence Between IT and Physical Security

    For years, the worlds of physical security and information technology (IT) remained separate. While they shared common goals and interests, they often worked in silos. Read Now

  • Unlocking Trustworthy AI: Building Transparency in Security Governance

    In situations where AI supports important security tasks like leading investigations and detecting threats and anomalies, transparency is essential. When an incident occurs, investigators must trace the logic behind each automated response to confirm its validity or spot errors. Demanding interpretable AI turns opaque “black boxes” into accountable partners that enhance, rather than compromise, organizational defense. Read Now

  • Seeking Innovative Solutions

    Denial, Anger, Bargaining, Depression and Acceptance. You may recognize these terms as the “5 Phases” of a grieving process, but they could easily describe the phases one goes through before adopting any new or emerging innovation or technology, especially in a highly risk-averse industry like security. However, the desire for convenience in all aspects of modern life is finally beginning to turn the tide from old school hardware as the go-to towards more user-friendly, yet still secure, door solutions. Read Now

  • Where AI Meets Human Judgment

    Artificial intelligence is everywhere these days. It is driving business growth, shaping consumer experiences, and showing up in places most of us never imagined just a few years ago. Read Now

New Products

  • Camden CV-7600 High Security Card Readers

    Camden CV-7600 High Security Card Readers

    Camden Door Controls has relaunched its CV-7600 card readers in response to growing market demand for a more secure alternative to standard proximity credentials that can be easily cloned. CV-7600 readers support MIFARE DESFire EV1 & EV2 encryption technology credentials, making them virtually clone-proof and highly secure.

  • 4K Video Decoder

    3xLOGIC’s VH-DECODER-4K is perfect for use in organizations of all sizes in diverse vertical sectors such as retail, leisure and hospitality, education and commercial premises.

  • Unified VMS

    AxxonSoft introduces version 2.0 of the Axxon One VMS. The new release features integrations with various physical security systems, making Axxon One a unified VMS. Other enhancements include new AI video analytics and intelligent search functions, hardened cybersecurity, usability and performance improvements, and expanded cloud capabilities