Citizens Memorial Hospital in Missouri is the latest organization to fall victim to a W-2 phishing scam.
An unidentified cybercriminal reportedly sent a phishing email to a hospital official requesting W-2 tax forms for all Citizens Memorial Hospital employees. The member of staff, who believed the email to be legitimate, ultimately complied with the request and forwarded the tax forms to the attacker.
The hospital has not disclosed the number of staff members who are affected by the breach. Hospital officials claim every employee who works at Citizens Memorial Hospital and those who work at dozens of other locations may be impacted.
The tax forms include employees’ Social Security numbers, income and other personal information.
Citizens Memorial Hospital has notified the U.S. Internal Revenue Service and the Federal Bureau of Investigation about the phishing attack.
The investigation into the W-2 phishing attack against Citizens Memorial Hospital is currently ongoing at the time of this post. The OPĀQ WatchDesk team will update this post with new information accordingly.