Amalagmated Sugar released the personal information of nearly 3000 employees recently through a targeted spear phishing attack on one of its employees. A hacker impersonated the CEO and requested that the W-2 forms of employees and retirees be sent to him. The employee honored this request, believing the correspondence was genuine, and provided the requested information.
Lesson Learned: This breach is the latest to highlight the fact that no amount of investment in your IT department can protect a company’s data if the hacker chooses to breach the system through human vulnerability. A well-trained staff AND strong technical support system is the equation business owners must strive for in order to protect its company’s and employee’s more sensitive data.
To learn more about this breach, click here.