Bucks IRS W-2s released to scammer, President Peter Feigin impersonated
MILWAUKEE -- The NBA, the National Basketball Players Association, the IRS and the FBI have been called upon to investigate a security breach in which Milwaukee Bucks players' IRS W-2 documents were released to a scammer, and Milwaukee Bucks President Peter Feigin was impersonated
The Bucks have confirmed in a statement to FOX6 News that the franchise was the victim of an "email spoofing attack."
Below is the statement from the Bucks:
“On May 16th, 2016, we discovered our company was the victim of an email spoofing attack that occurred when a request was recently made by an unknown impersonator of our president for 2015 employee W-2s. Unfortunately, that information was provided by an employee before it was determined that the request was made from a spoofed email address.
We take this incident, and the privacy and security of our employees, very seriously. We immediately launched an investigation, which is aggressive and ongoing. We quickly notified impacted individuals and are arranging for these individuals to have access to three years of credit monitoring and non-expiring identity restoration services. We have reported this incident to the IRS and the FBI, and will work with the authorities to continue our investigation and response to this incident. We believe this incident arose as a result of human error, and are providing additional privacy training to our staff and implementing additional preventative measures.”
A W-2 includes names, addresses, Social Security numbers, compensation information and dates of birth.
A cyber security expert tells FOX6 News, the Bucks fell victim to a common scam that often targets high-profile companies.
"Unfortunately it's a straightforward crime but not straightforward recovery," said Alex Holden, Hold Security.
The IRS sent out a warning about this very scam in March, saying they'd seen a "400% surge in phishing and malware incidents."
The Bucks are arranging for credit monitoring and identity restoration services.
Experts say from now on, it's important affected employees be vigilant.
"Monitor their credit reports. File a report with the IRS," said Holden.
FOX6 News is told these kinds of scammers will have the name of the company misspelled in their email address, or the name of the person they're impersonating.
The Bucks say there will be more privacy training for staff.