P2017-ND-133

On January 25, 2017, an employee with the Organization received an email that was purportedly a request from the Organization?s President and CEO for 2016 U.S. IRS Forms W-2 (W-2). Believing the email was legitimate, the employee replied to the message and attached the W-2s. On March 6, 2017, the Organization discovered that the W-2s were sent outside the organization as part of a spear phishing email scam.